Behavioral task
behavioral1
Sample
6b85b51fe10a7682a20132f9edaa3d83_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
6b85b51fe10a7682a20132f9edaa3d83_JaffaCakes118
-
Size
6.6MB
-
MD5
6b85b51fe10a7682a20132f9edaa3d83
-
SHA1
4713781141ec36736dbc16532dd256b550f2b3b7
-
SHA256
ea1d7388b0ac7b90f0fdf88e297c0fa7d509927ee0381d29c451e25106e584a1
-
SHA512
684f3553ea1a2688cdd9aaf3892b543ee3ca40bfe00d1841265499d4269f4aad476439376bf44bbc904db9825ea81c8023db9defb0e4f6070b15cebd95c98eab
-
SSDEEP
196608:F/c1e+DGTJ5Q+ICXHqNFIv7wwPgsy52f2K:F/+aJGIgF+7wwNyIf2K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b85b51fe10a7682a20132f9edaa3d83_JaffaCakes118
Files
-
6b85b51fe10a7682a20132f9edaa3d83_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE