Behavioral task
behavioral1
Sample
f6c9055d523b94dd0dd20cb2d59ce039_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f6c9055d523b94dd0dd20cb2d59ce039_JaffaCakes118
-
Size
423KB
-
MD5
f6c9055d523b94dd0dd20cb2d59ce039
-
SHA1
b25235cf8781ef947a70cebbe5ab5d3cfc18b442
-
SHA256
6b4200469bff3fb5fd0c7880de7f67d2fa83260a4159bf3d2305e73f005cdf05
-
SHA512
bcc8ae473369b75ec54d83fab15c4eb1a582ac7b64db62e45976c4b979d8c9623113bcf6bf520496f9c9f33d9b4b2a2cdd27dee7c74a844f04883176021d03bf
-
SSDEEP
12288:2lghoSqDNJ/Jj0PeLTCdKET05/hM4/KZood31gLeiW:8g2DNb0wCdKVhny/d31IeiW
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f6c9055d523b94dd0dd20cb2d59ce039_JaffaCakes118
Files
-
f6c9055d523b94dd0dd20cb2d59ce039_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE