Behavioral task
behavioral1
Sample
6556b383a5f2056d30d5d4a6cbc86259_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6556b383a5f2056d30d5d4a6cbc86259_JaffaCakes118
-
Size
784KB
-
MD5
6556b383a5f2056d30d5d4a6cbc86259
-
SHA1
e57e435cfc1ec8549b2ddbc64c7bc8853c625dfa
-
SHA256
305d412b04728d21b3171a3cd4a61bcde7d9d7dc0829ce22a5b1c9f73a07aad5
-
SHA512
00bd387ddc51fe532e62cbbc379d5e9676a1824c917959df96b598f845326734b85c90a9e9fe2536883b5eeda874345c4878e769183495077c884f98bc031b94
-
SSDEEP
12288:/O3Me+9Zm+j0zg/2SkbkA04Aeb1tCbxl+6JX3NjBhPURP8vil7LUjOinZQsmmH5Z:W3VEZmhzGykOh5+n95swjOIZFmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6556b383a5f2056d30d5d4a6cbc86259_JaffaCakes118
Files
-
6556b383a5f2056d30d5d4a6cbc86259_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE