Behavioral task
behavioral1
Sample
fccba66778c8731e64380cb917a9cd1b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fccba66778c8731e64380cb917a9cd1b_JaffaCakes118
-
Size
119KB
-
MD5
fccba66778c8731e64380cb917a9cd1b
-
SHA1
530965465f15cd7abfd55e87da9de4f4ccd0c964
-
SHA256
ea8f29cca11d40987beadb68cf900e19b41b536166062b9fbab00258b062ee01
-
SHA512
a591bd6b7d024f8330f71850f122b44bf681607fd7d42111e844a3d92024d07c39681503a3ddc91759f8b313f9b80151cf15129a0689f63ce800b64e7afbeebe
-
SSDEEP
1536:j1NAUwtT6sFstwrbUJnouy8rS2SZGprg5lYmu7IzCcEu5FZqoxvc0d:xgtTPFsw0Zout3SZOrg5lVeIzCtOV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fccba66778c8731e64380cb917a9cd1b_JaffaCakes118
Files
-
fccba66778c8731e64380cb917a9cd1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE