Behavioral task
behavioral1
Sample
fe193d3cd22ba42322642fa46fad6572_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe193d3cd22ba42322642fa46fad6572_JaffaCakes118
-
Size
56KB
-
MD5
fe193d3cd22ba42322642fa46fad6572
-
SHA1
fa5be5f74f4c8182f2bf7c8a14f6ebd6eeb6f967
-
SHA256
5715bb9de665fe5c924c14a413ae174cd78941cba16d606307491a2a67c2b6c3
-
SHA512
585ce40ab3ca2b6bdccc5a2d30396e218942e9fd0c8cf2a261b73e4c1df796ecb9066e605091abb35e0ff73031e0d58278b5ffebe272ef2c14fc5470e302aa49
-
SSDEEP
768:YQJ5RTiNdt+Yj7JmxThspX/6Z1tZz48P+knvuDa4C3kIjSco+gkzp4qKSMbhNLeu:rJPG9XwZXJ3vuvwktsd4qLC3DVEGAY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe193d3cd22ba42322642fa46fad6572_JaffaCakes118
Files
-
fe193d3cd22ba42322642fa46fad6572_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vimohiq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE