Behavioral task
behavioral1
Sample
60799c5e6382bdaaff81873fd0365ae6_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
60799c5e6382bdaaff81873fd0365ae6_JaffaCakes118
-
Size
784KB
-
MD5
60799c5e6382bdaaff81873fd0365ae6
-
SHA1
72a1f7f4cc47eccf75a9705727225ad7a0b715c4
-
SHA256
d8a49e24837cca0668dd73172678bebd67d6f57aaab40f17050f78fc890a4b57
-
SHA512
7fac853b1f8829690220cae0d4856d4367f42ebc1b1193451473b99b82c4def711ccf2f9a85418b5bfd3146367f0ae3d7125d9f5c74fbc241daad0781b5a3fd9
-
SSDEEP
24576:sOnoiZDcwmR9vvTRjhEOhF9pkv+QubwiQiv2jgrNDEv0UA8l:NDcj/4WDkv+QuT7v2aEBA8l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60799c5e6382bdaaff81873fd0365ae6_JaffaCakes118
Files
-
60799c5e6382bdaaff81873fd0365ae6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE