Behavioral task
behavioral1
Sample
68607b08757443b49c5661414a62133a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
68607b08757443b49c5661414a62133a_JaffaCakes118
-
Size
198KB
-
MD5
68607b08757443b49c5661414a62133a
-
SHA1
2c28f9869df2b599c42af4764bf64204272087a1
-
SHA256
256e49fd9a38552befcddbbd376adaaf76816a7781f1f821abf89356f54efe9a
-
SHA512
40e8f63e168c1f58d42c2a8700be99db7fa12afda0a3c56de0b6a99a1ea4db37da587e1185b99ecb825f99033bc657748fc5c012b452ddf51028b6aae3b0e647
-
SSDEEP
6144:2ZC4d3lbxc6wU/UP+XhdMRFD3LAwektgoS8:f4dMRU/UP4heFjLDFtgoS8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68607b08757443b49c5661414a62133a_JaffaCakes118
Files
-
68607b08757443b49c5661414a62133a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE