Behavioral task
behavioral1
Sample
fd5363e99933a26b95a529642eeb9986_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd5363e99933a26b95a529642eeb9986_JaffaCakes118
-
Size
784KB
-
MD5
fd5363e99933a26b95a529642eeb9986
-
SHA1
8fb329ee74a3bafca08fd8433e2a79a35d830ca0
-
SHA256
39c2a9e571795775540d30ef20734af0b62434183787be6662dda2fad3c27624
-
SHA512
cfa13b972ae689a80858bae18cbb198968e3d2b1c48bb49d765963efdaef5903a812c2e79d282235ec99db23458fda12bb4ef223d7b2a0e431211a4feb303e5f
-
SSDEEP
24576:chIBmePB38LHVd9AI1BtdP3nZ6bziF3L4s:c65PWrP9AwBDP3Z6fitUs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd5363e99933a26b95a529642eeb9986_JaffaCakes118
Files
-
fd5363e99933a26b95a529642eeb9986_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE