Behavioral task
behavioral1
Sample
6a1faddd834b0ab5238611d62f7fc719_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6a1faddd834b0ab5238611d62f7fc719_JaffaCakes118
-
Size
48KB
-
MD5
6a1faddd834b0ab5238611d62f7fc719
-
SHA1
5520ff1b457c7730dd64386a092b3295519d83bb
-
SHA256
ad4bf61b7a15b3921dcc99918067706d62e80eec541a5eee9a0a4b76a38a1581
-
SHA512
cddd2f8d96499afd2b1fb93006dc6f006d3b506957da9cd8f2782f4df1494e448dfeabffda41f7629caa81f48dc15b9b94cb1a1e561e48d72881ffcc237707dd
-
SSDEEP
768:bFuIydXjOknp1godZbOF4s06B5CLw7Dot1O8wXHe89Y0IGhwFuIydXjOknp1gd:1wiofgovOFQ6vD70tsXja82wiofgd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a1faddd834b0ab5238611d62f7fc719_JaffaCakes118
Files
-
6a1faddd834b0ab5238611d62f7fc719_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA