Behavioral task
behavioral1
Sample
6820fbea1adb7f427d8ba44d0d1339de_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6820fbea1adb7f427d8ba44d0d1339de_JaffaCakes118
-
Size
427KB
-
MD5
6820fbea1adb7f427d8ba44d0d1339de
-
SHA1
d92ae07b3909e34913eacdf9015cfd9f208cae3d
-
SHA256
f4351e0f3869c4993f1476b7645e0edd61b7cb2f48a49642b8c730fcdaf74a5a
-
SHA512
7f4eb05960fe5d070f7a181d349409460262d2fa3fb855c5cdaf85db305ed2e688a30c6d256604892ce3bfe23805179edae90c9e62ffababbeb543b1ec5684de
-
SSDEEP
12288:K1YSCp1sE4F9G8qZ6VPlT6+825Y6qnTr5R:K1YS8P4NqZ6Zlu725UTr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6820fbea1adb7f427d8ba44d0d1339de_JaffaCakes118
Files
-
6820fbea1adb7f427d8ba44d0d1339de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE