Behavioral task
behavioral1
Sample
6604fa7d132b241c7eaff6a07593b955_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6604fa7d132b241c7eaff6a07593b955_JaffaCakes118
-
Size
388KB
-
MD5
6604fa7d132b241c7eaff6a07593b955
-
SHA1
5066bce3890bd3a468f191a2a5c6ab13fe56d935
-
SHA256
bcd1a67dc8c16fca512758294df362a024ec2203cfd0f2546d92a627a7c1eaf4
-
SHA512
d96fe65be27b2242f503d0219c090ffe8700f2966286d73f406a3b9976edfe3c35ffd850d2789dd1b718b661a01c4a24b3c3861c65d9d4b3967c3fa789d41045
-
SSDEEP
12288:HAmVSsQ0i5jL49dDoSNn0qtmggK5XRh7PGuOgg:gm52jL4LAqtzRrbg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6604fa7d132b241c7eaff6a07593b955_JaffaCakes118
Files
-
6604fa7d132b241c7eaff6a07593b955_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE