Behavioral task
behavioral1
Sample
fc1d645f8dee1bb289d4ae9f6e0ad15e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fc1d645f8dee1bb289d4ae9f6e0ad15e_JaffaCakes118
-
Size
770KB
-
MD5
fc1d645f8dee1bb289d4ae9f6e0ad15e
-
SHA1
e568c106a107a42c4d34f41e739d05e510cc8ae4
-
SHA256
4cec30296e86476a05e2464655532defbc3ebb32590dd57cf97195a81f868293
-
SHA512
4e56772fd50f6897eb1622d78417d299a9cd3d631accfa3082b8e111a1951ef30dbfd55666fd4789c166e67337aa775677ede8c2f616c760235a49e8ea203f2e
-
SSDEEP
12288:LzsUy+HD8vzV6BlYTHJzPKOs6CnXTfqr2Goh5D9UCH:LYUpAV6BelbZs6CnXTfqr2PB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc1d645f8dee1bb289d4ae9f6e0ad15e_JaffaCakes118
Files
-
fc1d645f8dee1bb289d4ae9f6e0ad15e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE