Behavioral task
behavioral1
Sample
fca3b72775227180e30a47a3446897a5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fca3b72775227180e30a47a3446897a5_JaffaCakes118
-
Size
232KB
-
MD5
fca3b72775227180e30a47a3446897a5
-
SHA1
05ff3e303a0b40e1ee55d574dd45575f29d7f2e2
-
SHA256
dd7820165e231f399c9bcd1b5400276b79cc8f041bbd9b1c6bd38566f44e75c6
-
SHA512
9c59bb8706f09554a47047c1efbe38beb772f400f794908bf3e88e9b233eafaeab21f8d23ecdd98c9b0651bde868caed354b4d2e7b7ad5cf83c89dcb2d165dec
-
SSDEEP
6144:fE7vyUgxa+Pjcuan3VPiCn5b7Dq+oSMMMMMMMMMMMMMMMMMMMMBMMMMMMMMMMMMM:fE7vUDPQ665f5oSMMMMMMMMMMMMMMMMa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fca3b72775227180e30a47a3446897a5_JaffaCakes118
Files
-
fca3b72775227180e30a47a3446897a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE