Behavioral task
behavioral1
Sample
6a381287aa18015fa05b57b3530f18bb_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6a381287aa18015fa05b57b3530f18bb_JaffaCakes118
-
Size
784KB
-
MD5
6a381287aa18015fa05b57b3530f18bb
-
SHA1
4805ff1abd5c559485d755c5c8cd65ebe1a9d97a
-
SHA256
b141cd0e0cf8786c82a57cf625ec856d88b203f5fcbf831f314c0519d239499e
-
SHA512
26e937553fd40b127211de87f5fc10f5a3823ac4afca456d034bf4e8c5842a2c7e1f2338e61f01e945956304246217a9d2688ff355272e1a8b80adf55e312f5c
-
SSDEEP
12288:LOq9gCT47760Q6TPr361MpnWUQyqbdz/tbwa0RDjTk/ripOrPI:LngCT47jDHZxhgz/tIDjTk/EO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a381287aa18015fa05b57b3530f18bb_JaffaCakes118
Files
-
6a381287aa18015fa05b57b3530f18bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE