Behavioral task
behavioral1
Sample
fd7ceb1920c69b4220152addde261879_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd7ceb1920c69b4220152addde261879_JaffaCakes118
-
Size
1.1MB
-
MD5
fd7ceb1920c69b4220152addde261879
-
SHA1
208c1a83b683fe467cfc98630d91df8a24310f6e
-
SHA256
893fb9d285ae53e7c9141c7ddf1675e6ab078963ef69e15086177044785b65e2
-
SHA512
d0c62fa0d0ea8fa72ef185863bd99722c6865434a06abdd2e448a83af1f6fecbc2d5349e4ed52a879e1ccfda157162faf223e4d1b38a61fc2b974a11d8c31d0e
-
SSDEEP
24576:A/DKVV5+XZeoeOywf6TaERZPJrgnWZRD:AnD2HTZhrgnq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd7ceb1920c69b4220152addde261879_JaffaCakes118
Files
-
fd7ceb1920c69b4220152addde261879_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 537KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE