Behavioral task
behavioral1
Sample
fee2b6af26578cfdedbf4182ee52e734_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fee2b6af26578cfdedbf4182ee52e734_JaffaCakes118
-
Size
11KB
-
MD5
fee2b6af26578cfdedbf4182ee52e734
-
SHA1
b5ae9ff1a2c02c2d0acd79dcd11f965dec704eaf
-
SHA256
f48f42d6e947ef5964944e50bbf4f0f1b9d2a20ea8960deb0ee5145139170463
-
SHA512
aa97461a44f458c2512c84f24d27cc19eeddfe9ee2993e5f6c1b28b7cd46290e7bdc2daf305769a9f4055f89c4aa07c1e682b1a10bcd728a3d7b86224bb51686
-
SSDEEP
192:LaHLhVmeR7JnQaF6eJTcvOYAJchPvtefN8hgGQf6K2AAIGJGkLHHzFaNJhLkwcuN:ALfJvnQ6Ov8JcPGN8hNfDIGJvaNJawc8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee2b6af26578cfdedbf4182ee52e734_JaffaCakes118
Files
-
fee2b6af26578cfdedbf4182ee52e734_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE