Behavioral task
behavioral1
Sample
fcc581b2667930a152ab8e4623e890f0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fcc581b2667930a152ab8e4623e890f0_JaffaCakes118
-
Size
2.8MB
-
MD5
fcc581b2667930a152ab8e4623e890f0
-
SHA1
93540262d993a80b68bfb070cc28f6d7b4d00c03
-
SHA256
d5e5db1204ea72540bca5225285ea24a326d4896435b5b75837ea3e39db86cf2
-
SHA512
0fd7cc2bc0d4bbf192d58d35b009a1a1085dbd245ffa38f14d712e874ce44b502c9f562a508e358d16cc06d11142e45ec753a58e963626850e22029d429f5a9d
-
SSDEEP
49152:Z8zCMDSglgWPLQLzdKFbSRyek7573X3ZHn0/xgZtIq+o7uMKKCrknKEyv:a2MDSleLQvgF+Ryek1bHJ0/xytRf7uMc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcc581b2667930a152ab8e4623e890f0_JaffaCakes118
Files
-
fcc581b2667930a152ab8e4623e890f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE