Behavioral task
behavioral1
Sample
6a13e5bec294ec4f973ab4e292c42b34_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6a13e5bec294ec4f973ab4e292c42b34_JaffaCakes118
-
Size
144KB
-
MD5
6a13e5bec294ec4f973ab4e292c42b34
-
SHA1
19b4c5a737f442db10615241031b9309fd19b946
-
SHA256
8e782cdf7f2c694d38c00d180c06ff7d8f5810a2d5d3eb202942278932bb622a
-
SHA512
1eb832a1bcc7615f3b5103908385e63ce2a95dd49933037133c626f76e3b9a6a3646f224455f1d274a033f2450950a15df58863d734532d865f7dba848921e44
-
SSDEEP
3072:qotPRXWZimhvN75TS4mHboBkt5qFmEg4PHs06j0YNeviK7kiJU4eh2o/Sioutrc:qo5RXVmh7+cBkt5qxPHsrjwvgSReAo/6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a13e5bec294ec4f973ab4e292c42b34_JaffaCakes118
Files
-
6a13e5bec294ec4f973ab4e292c42b34_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE