Behavioral task
behavioral1
Sample
fe8845e1e6100cab98228b64a45c494b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe8845e1e6100cab98228b64a45c494b_JaffaCakes118
-
Size
784KB
-
MD5
fe8845e1e6100cab98228b64a45c494b
-
SHA1
fdab13f3546d06e12e67565bae3bf14e71fa6ab1
-
SHA256
c5932a51670d7880279c91d22ef0a4c72f9fc894f213d250439789d9f6d31cfd
-
SHA512
42f65191251ccfd3bb7d42d391c2e490be5ba5d283fffd7feec5b0bbb9b390e0fa62cdce4d273be3fbe4a63ad1c85e885a1144521aae58f73e21852b3c0f9615
-
SSDEEP
12288:pS8WLDPO1RdGtTeHDNf+msygyxQewRpW+HDiYuO3l6pW2mTkFv+E5GE0:+LrOvdGEjNfAyg4OEKDb3W6T4GEd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8845e1e6100cab98228b64a45c494b_JaffaCakes118
Files
-
fe8845e1e6100cab98228b64a45c494b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE