Behavioral task
behavioral1
Sample
fc953f97c9e894fb5b217993e97a3824_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fc953f97c9e894fb5b217993e97a3824_JaffaCakes118
-
Size
784KB
-
MD5
fc953f97c9e894fb5b217993e97a3824
-
SHA1
531d9bb25a774e1151ffbc80dac6006fd60a78b2
-
SHA256
8869b5fea9e0e0f18e34acd68f20f971b5afe8f12643c3927299d3091dff7923
-
SHA512
1b8a03091110854cede2b665450c9467e23795505399fe47b3fc537992d67b17e0c2cce08a1d02d2c7344458ccd7944d26527dacf7895d7281f9671a8ef7f18f
-
SSDEEP
12288:rt9tEChhghb7wgzIsNNdNnOw1TFjMVHPxezZxfoadJK6/bwswnYsh5/3cHk:5HhhgdBQmTFjAPsDoa7Dw/5Pc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc953f97c9e894fb5b217993e97a3824_JaffaCakes118
Files
-
fc953f97c9e894fb5b217993e97a3824_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE