Behavioral task
behavioral1
Sample
f7c662607bc7b63f4a0916bfc67d3b66_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7c662607bc7b63f4a0916bfc67d3b66_JaffaCakes118
-
Size
201KB
-
MD5
f7c662607bc7b63f4a0916bfc67d3b66
-
SHA1
bd4c95f9ac49b3a7f61703b77b5b9eef6c5b35a1
-
SHA256
d6de80969d3a646393de238a449a0ecb8dbd6b716c29b95edf2d80ef3c04978b
-
SHA512
86d57c4923b5d6d4818eeeff44eef35e03d85d226bfdc5dcc12f37d7a6c5b54a6cb79c25040668d4c369d8602881a83be15ff0fbcd8ba344ced19b1dcdea8f58
-
SSDEEP
1536:kYNdSL2R8mS1BWkeK+jQ6nDwNg9YFwJtNc5oLq44OE2bN/Le0Vc:kAOA8mSHWkqjQ6nkSniCJE2bN/5y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7c662607bc7b63f4a0916bfc67d3b66_JaffaCakes118
Files
-
f7c662607bc7b63f4a0916bfc67d3b66_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE