Behavioral task
behavioral1
Sample
fe4daced90a4c5f65154428949fd5083_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe4daced90a4c5f65154428949fd5083_JaffaCakes118
-
Size
189KB
-
MD5
fe4daced90a4c5f65154428949fd5083
-
SHA1
115c031252745d8519c3d08e49c79b5f1a46e8c3
-
SHA256
1bf1aca559af39c6f811d43737e065d8f9ef2dc632ef3781eca6bea8f528bbf1
-
SHA512
06e46c5daa6765227f58f0b01c9b6db3b6372e48fcbe6c1e731f4a74329db2f1d59a9f2649f197e8b11b7debcdeba49890c817b56ad8ae4588c47c4804e6fba3
-
SSDEEP
3072:CDCuZB7r3yDi22wCXy64bitKCtu6Uf2WrVmTvkAC0KBELo5HhC1B:CDC5m22wCiOuYcmTvkELMWB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe4daced90a4c5f65154428949fd5083_JaffaCakes118
Files
-
fe4daced90a4c5f65154428949fd5083_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE