Behavioral task
behavioral1
Sample
fcde54863502a1549bec5b2bec7081cc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fcde54863502a1549bec5b2bec7081cc_JaffaCakes118
-
Size
385KB
-
MD5
fcde54863502a1549bec5b2bec7081cc
-
SHA1
33e2b4fd29ae2cac6b66099ca84c3ee285efc9bc
-
SHA256
6388aa61385746250c4fa2f38b49c1ae5ffc19728c857855363658aba4279bfd
-
SHA512
bd6305aa9443e35b00584a97d7e2764f6ece92a9e33b7e98dac97e39b001c3eb2af679ad4353d37b345fd1ce1d231bc3bb7756a26f408aed97949f837c0be075
-
SSDEEP
12288:fDE5CSyo+vtSWfsxgYd6Bwv76ai7xdNULQbbleGcD6:fDE5jMUWfsxgwv76d7xn4QXlX4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcde54863502a1549bec5b2bec7081cc_JaffaCakes118
Files
-
fcde54863502a1549bec5b2bec7081cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE