Behavioral task
behavioral1
Sample
fdf7411613b7861a36b0193f330d1ee6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fdf7411613b7861a36b0193f330d1ee6_JaffaCakes118
-
Size
359KB
-
MD5
fdf7411613b7861a36b0193f330d1ee6
-
SHA1
2247ec282db6f32932cd2c164374c67f648bd9e8
-
SHA256
c510805e87b3ef8afcae06f1c65f44cf52645b7b920aab6864b88c2c1f98b90b
-
SHA512
3f727dcfafca19eb0fcbe6b8167b90be9fdd403ca92e52d05fcfdd69ae36b700f46707b394652e00bf18af74a9cb99104e202b94880176502336daeba66a922a
-
SSDEEP
3072:Kk59fo2r2f0oJDib8iLws7ngPZwGj9Tf8:Kk7o2r2fj2P8sbgWGj9o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf7411613b7861a36b0193f330d1ee6_JaffaCakes118
Files
-
fdf7411613b7861a36b0193f330d1ee6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE