Behavioral task
behavioral1
Sample
fc0e654202818d523aed11d2a4626618_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fc0e654202818d523aed11d2a4626618_JaffaCakes118
-
Size
98KB
-
MD5
fc0e654202818d523aed11d2a4626618
-
SHA1
125cff37b83d8365512279a5b3208d69ac097d1f
-
SHA256
37fa17c775c6fbdbc931e57b0b3b5707bcca590341b16a253669c04dec0fd309
-
SHA512
50619d8fff03b1b0b526a540a8f2811dae41f0dac6fd72df5df466b22b3f99ddfbd6dafb7955fac264f1f8883809d49c57e9faef197b379cf3949789ca20f4a3
-
SSDEEP
1536:+YjIyeC1eUfKjkhBYJ7mTCbqODiC1ZsyHZK0FjlqsS5eHyG9LU3YG8nH:LdEUfKj8BYbDiC1ZTK7sxtLUIGa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc0e654202818d523aed11d2a4626618_JaffaCakes118
Files
-
fc0e654202818d523aed11d2a4626618_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE