Behavioral task
behavioral1
Sample
trainer +12/fdx-fct.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
trainer +12/fdx-fct.exe
Resource
win10v2004-20240508-en
General
-
Target
17d4b275d4af2a29386e9b00fefe669c_JaffaCakes118
-
Size
48KB
-
MD5
17d4b275d4af2a29386e9b00fefe669c
-
SHA1
fad7cc959015f5e4a85361342b3eaa347448873e
-
SHA256
2f00b053c4704f25983588dde49ffa3aab60ac1d1b869aa7a03e8572c6d882d2
-
SHA512
fbeb9554108ef6c61b7b0128bac73c819c62dd3c15ed3104ee9d8726775c44e1c62ab439d235af4826a1e5ac52f1e8aae152de70ff0158e5738a046ef8b203a8
-
SSDEEP
768:yZovytvaUPZsI8tibX1GnRj5he+/gDPWs6ipas4Zmu4fJoI8WGPfu1rWs06xoCkb:XywcZ3fXez/k6iAs+muhI85Xu3jCCf4
Malware Config
Signatures
-
resource yara_rule static1/unpack001/trainer +12/fdx-fct.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/trainer +12/fdx-fct.exe
Files
-
17d4b275d4af2a29386e9b00fefe669c_JaffaCakes118.rar
-
trainer +12/fdx-fct.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
trainer +12/fdx-fct.nfo