Behavioral task
behavioral1
Sample
fceb87baeec357512811af592fee9c49_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fceb87baeec357512811af592fee9c49_JaffaCakes118
-
Size
784KB
-
MD5
fceb87baeec357512811af592fee9c49
-
SHA1
1faf243f619e6cd1ad7ef283409d0e98c6ec363a
-
SHA256
8fbdd9c0855894921dc6a3e68774b9027f350feb43a8b75c1e9f0b6ca80cbe3f
-
SHA512
f6c14ea96a6b9eddc1407bc12e62b9da85b106cdaf58f33cd4f11f4b78414c647c86b1a06106287ceedcd129a57ca3f3a9792db7af19a9f74fd0c26904f307b8
-
SSDEEP
12288:p7L1TD+Det9dFIB9WwjHqPa9ryY542jKB5sczRdDQn/Bm9rsZN6C/TIxiJDij2JM:B1TDWemJpfp45scuJerebYyJUf25QV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fceb87baeec357512811af592fee9c49_JaffaCakes118
Files
-
fceb87baeec357512811af592fee9c49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE