Behavioral task
behavioral1
Sample
063466f42a34bcc0aa57883aa9d43d11_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
063466f42a34bcc0aa57883aa9d43d11_JaffaCakes118
-
Size
10.1MB
-
MD5
063466f42a34bcc0aa57883aa9d43d11
-
SHA1
1c226ba18302c3d71dcbdb1105c5dfa3e34cbee5
-
SHA256
1bb188954f5b2b2d41a01bcfd46118843844cacf3bbdb4a5d61eece4563d2122
-
SHA512
dabe54b3e9f9e4d185e117b9ea7ac2d2db562279dea9b8c825b33402317233258c23f403438f943abcd6f32d6f7aac8d7c73cfd0a975dddda9d36be9daa6050e
-
SSDEEP
98304:CBlMs9OAAmiXMxH9a8HTmhj2q4VbkxvezgWjv:C/MlAAmo+a8iC5Vbfb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063466f42a34bcc0aa57883aa9d43d11_JaffaCakes118
Files
-
063466f42a34bcc0aa57883aa9d43d11_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE