Behavioral task
behavioral1
Sample
6949c1f0679fbce1567e066bb5546c7e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6949c1f0679fbce1567e066bb5546c7e_JaffaCakes118
-
Size
12KB
-
MD5
6949c1f0679fbce1567e066bb5546c7e
-
SHA1
39b0146c9cd76d1b1d2f0cbe18107c601a1a9818
-
SHA256
df9f4cb440d45696625a21fd37bb4a1517b28c9bbf4d8b1b22050fcfa6945a23
-
SHA512
c6b8767aa6d4f14d08be81fd1d3b46f2b314036c5285b38b49c75e85be642d81128f79debe29ac28b23f788fd576426160c40545f21e696c4558f0a68dbb102a
-
SSDEEP
192:KZRx8Zr0c4XQLYKlLMjwExVKKzdFet5EJsnHr1MFvaJh6AoI7YYzmbP/iJ:KZOrRrYMMjwOVKKfetRHpxhddEYB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6949c1f0679fbce1567e066bb5546c7e_JaffaCakes118
Files
-
6949c1f0679fbce1567e066bb5546c7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE