Behavioral task
behavioral1
Sample
fc61f691676cfd5582bc608a444a05f6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fc61f691676cfd5582bc608a444a05f6_JaffaCakes118
-
Size
800KB
-
MD5
fc61f691676cfd5582bc608a444a05f6
-
SHA1
6f73be5d100de6e8be730b373ea4da018e470b28
-
SHA256
c6b7141cadefc5ffc1b0dc0fd6220a59c5f2772d01d9a0ae4c98c6dd11aeefed
-
SHA512
4eef115ec093b9ac4f4407753baa448297bf7c099b1e68cad3f66d1fbc2442a7fe1f841bfab32a58f924a5de223444c6bd3a6a7aa46e5a468a6ad010aed456d2
-
SSDEEP
24576:AIiwtDwN4NSDiGQwafYN1W+QDIFZXUUtDbtf2HDm:1tDa4iKwb1W+kKDbt+jm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc61f691676cfd5582bc608a444a05f6_JaffaCakes118
Files
-
fc61f691676cfd5582bc608a444a05f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 790KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE