Behavioral task
behavioral1
Sample
fed15dca2eb5a0619995e24404729d90_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
fed15dca2eb5a0619995e24404729d90_JaffaCakes118
-
Size
341KB
-
MD5
fed15dca2eb5a0619995e24404729d90
-
SHA1
32679faeb828fd3f5ea762a84864fe85bc5fa703
-
SHA256
accc5109bfa5bfaae4e0e3c6d1c0a7d9a8cebd708823b88c2201fe0fdb10c577
-
SHA512
9bdb1ff28b17bd39e01d24dd20d04ca66af03db88846e0a275524bc2a7fd2e1ff06f91acad65988f2bb0c6527bdef8bbd20bcd45c405e2ec0d7e889c362b2f59
-
SSDEEP
6144:/F9T6shQ6WVx+6sSyWWjsHkZZoC+Quj1CToU/+T9IV6c1qNF2jn3a:/DT6sQ6WV06yWknv+QX85II2La
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed15dca2eb5a0619995e24404729d90_JaffaCakes118
Files
-
fed15dca2eb5a0619995e24404729d90_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE