Behavioral task
behavioral1
Sample
f6d4235dcf2d072589fc4efafefe3a8c_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f6d4235dcf2d072589fc4efafefe3a8c_JaffaCakes118
-
Size
371KB
-
MD5
f6d4235dcf2d072589fc4efafefe3a8c
-
SHA1
9d94cb4ce2c8d44ef9a35d09cdffd0fac1dcbdcd
-
SHA256
6b9bf0d0da1ffd63c7ffa9c2cf85c23837ed42055e28ba8afb597bae4d98430c
-
SHA512
230afd490244a591c7c3a0c5a924a5efe2e58ef1c139cbe286517055dc7467b95407e13d433785a82d8aabbdef13c6c41536a4589c1297e9ad1c6b4a39aef2eb
-
SSDEEP
6144:hGyGEwNMPRbOwMF2SF8qAYmhrEHMf3Fck52Cup/Fp3qYQ32KnWTC/I:h3GLHRFU9FkMf3rcpf3HA2KngaI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d4235dcf2d072589fc4efafefe3a8c_JaffaCakes118
Files
-
f6d4235dcf2d072589fc4efafefe3a8c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE