Behavioral task
behavioral1
Sample
6a47b4f53fa0e9f43202328433918943_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6a47b4f53fa0e9f43202328433918943_JaffaCakes118
-
Size
784KB
-
MD5
6a47b4f53fa0e9f43202328433918943
-
SHA1
6113d6218a840c22419e144893c2b96254946c87
-
SHA256
7bf02aa4f2801710861cc84701cf7eb26f0cec7909525ce2c6b314a69a64315e
-
SHA512
d44f1f9056fd4d7a65008314a3bbda675daff428bd66bb610cba70fe7e1f8f7abf55d3f964d604fe4fd3cb7023f1d1039d66f0b78e541bc6e2e4397fd77b42de
-
SSDEEP
24576:VTHUl1iCM7HuEcdXlsSZEPh2gVmoKSS4v:1Hy17VEuXlPEPh2qmoKSFv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a47b4f53fa0e9f43202328433918943_JaffaCakes118
Files
-
6a47b4f53fa0e9f43202328433918943_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE