Behavioral task
behavioral1
Sample
fed10e0a8b1a725651f729e95d4615a5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fed10e0a8b1a725651f729e95d4615a5_JaffaCakes118
-
Size
784KB
-
MD5
fed10e0a8b1a725651f729e95d4615a5
-
SHA1
4edaa351cb30ab7f1192a6709c1764938899913e
-
SHA256
4d8594a3d3d9ebe63d0b5f9852bef08128fbba3aef2e3ca9bda3773c36cf9527
-
SHA512
96648e2b8ce5554a6154f5cc4dba4597595de18b80f6b689ef3a3627d474c701ba996deb1f91485a3120393598c3c272dcad5fc0af9480300b46a11c5bc791eb
-
SSDEEP
24576:90XtETYrGU/1lJYwexciY4zhKYIjXdjb4rfe:9APG+xKjxIjXdjG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed10e0a8b1a725651f729e95d4615a5_JaffaCakes118
Files
-
fed10e0a8b1a725651f729e95d4615a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE