Behavioral task
behavioral1
Sample
fc440bb477b9ca1d94b0fab18758d238_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fc440bb477b9ca1d94b0fab18758d238_JaffaCakes118
-
Size
104KB
-
MD5
fc440bb477b9ca1d94b0fab18758d238
-
SHA1
60303f8fcb44681344ba7e0816f13882b21d8d61
-
SHA256
300e08203d37475f8613e2aefc0f5398e86b6504006c635c18e11d8c3e27ac42
-
SHA512
2250581c4e453670b707a5ca829498e833b0ea76009332aaaa1e98f06f077f0d7c3d454ef2b3b5454136a7bf108c94dd192aae74c5536ff64f4400ba8a3518c1
-
SSDEEP
1536:cheBtSIpbNuAbRmx5z5ueG6Tc+taCtiOXJl7QlP0f2IQbc6QLhR:qeecusK5z59P5vRle6Qb+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc440bb477b9ca1d94b0fab18758d238_JaffaCakes118
Files
-
fc440bb477b9ca1d94b0fab18758d238_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebhyrxh Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wnieqht Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE