Behavioral task
behavioral1
Sample
fd08de6f6e843a5fac3f666cbd42a4c1_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
fd08de6f6e843a5fac3f666cbd42a4c1_JaffaCakes118
-
Size
784KB
-
MD5
fd08de6f6e843a5fac3f666cbd42a4c1
-
SHA1
fec236ee5ae132d1d4865ac03caf10c7332a3f8a
-
SHA256
daa6f26e3dba97efac120ffe7bd202d93b8c13613d0b1c0643a67892717631b6
-
SHA512
62d83f6cea01ceb7acaae8c9cc3df1fe06b4eecc5f66efd24ac842919c9bf66e0f4420840925bcb692abcb4044b5951f707b7f27ac824d1ee7866ccd79e04345
-
SSDEEP
24576:ujYX4xGicE8fgIIi+ulmIRpEqeS2g8BzJ:7IxGQkg7uEI/lEJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd08de6f6e843a5fac3f666cbd42a4c1_JaffaCakes118
Files
-
fd08de6f6e843a5fac3f666cbd42a4c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE