Behavioral task
behavioral1
Sample
fc1052634d5662afc2b7d62ecbccf375_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fc1052634d5662afc2b7d62ecbccf375_JaffaCakes118
-
Size
7KB
-
MD5
fc1052634d5662afc2b7d62ecbccf375
-
SHA1
101e0a1efaf21e19f6b722126a82fc84b4430275
-
SHA256
3288160f94c991b2e05268ff45a68796b2d81d857d7de1fad3ad7dbfbc387d26
-
SHA512
534e90fcd8b79d668e23a621048935bf04e0264779eb8792a10422cd354936fc4dcc3cb4bdd066c5669190b5ebc7982d92476a6e0b5a87062c5b384da45c20e9
-
SSDEEP
192:9/gPOSURWyCkueosQ4Lbi9SlirPuZ0Ivo:9/08Rj31osQ4PiolirPAo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc1052634d5662afc2b7d62ecbccf375_JaffaCakes118
Files
-
fc1052634d5662afc2b7d62ecbccf375_JaffaCakes118.exe windows:4 windows x86 arch:x86
198217f39a1b31368681bed82723db34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
msvcrt
_iob
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE