Behavioral task
behavioral1
Sample
fe8a5b0c24c193bc7d5eb9ebd0556a17_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
fe8a5b0c24c193bc7d5eb9ebd0556a17_JaffaCakes118
-
Size
784KB
-
MD5
fe8a5b0c24c193bc7d5eb9ebd0556a17
-
SHA1
ff6e7954a70dffbba7c02a0fc043826a52960f77
-
SHA256
c345ecf0a6ac45488bc47f667181146a7459d739b46d968beb4da113e40c751d
-
SHA512
09bd3628ab45a4db793547db558c3dcc17f873304953d85abcdb708195691869b092c03f0a954536fd5bce5d55d83ffb73ba7ddda498c904645149ab26d4744d
-
SSDEEP
24576:MoAuNeZ1c1YrU4tsde8zKXZmrH0B73fXGuV:MoAuN4cAyefXUbQ3f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8a5b0c24c193bc7d5eb9ebd0556a17_JaffaCakes118
Files
-
fe8a5b0c24c193bc7d5eb9ebd0556a17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE