Behavioral task
behavioral1
Sample
68e997299c596586e2cf731d4c3ce1bf_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
68e997299c596586e2cf731d4c3ce1bf_JaffaCakes118
-
Size
245KB
-
MD5
68e997299c596586e2cf731d4c3ce1bf
-
SHA1
52f09f8691c633a5836ff1fcb42b6f38afdacd97
-
SHA256
492ac04c2428e484f044470bd5fa0986834745c5738d8fc1846d1993d9022c9b
-
SHA512
ec9ea040c8126f1721bd2f9020ebdf6a2dcfe03c5968b733f9b7ba5dd675f1c3404dd4494aeb9c1c06dd290b55bda39aaf3ce97c12b1f8a4b94e6f64f1f0c45a
-
SSDEEP
6144:VMcPCDYE/mDkQKJsmstf8ZVv6QHqxpS0BXfqUOACDgMhwuoS:VMcPi/e7R5f8Zt+pZIHoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68e997299c596586e2cf731d4c3ce1bf_JaffaCakes118
Files
-
68e997299c596586e2cf731d4c3ce1bf_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 234KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE