Behavioral task
behavioral1
Sample
69a9e37a5820d691cb77eb48979e0e65_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
69a9e37a5820d691cb77eb48979e0e65_JaffaCakes118
-
Size
261KB
-
MD5
69a9e37a5820d691cb77eb48979e0e65
-
SHA1
dc98a4b12a526157474236540470d6f325ea010a
-
SHA256
164a466862fb1c117cfa126317628c02e8f1bf201d43abef90d969a36adbd049
-
SHA512
93bd95ea5dbf0aed4aae7bfbc076da1eb09a224c0127922acd337461ed1a330cee5b7b5fb2c3e364ead55f83df9efff44318174f6422545251ddda0238050bf8
-
SSDEEP
6144:7xfR1BdQJ8FL8C9ItO/nZNRhOqoQCAcmNEoY:1f9dS8F4C9Itonb7mQ9Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69a9e37a5820d691cb77eb48979e0e65_JaffaCakes118
Files
-
69a9e37a5820d691cb77eb48979e0e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE