Behavioral task
behavioral1
Sample
6a70a9cdf6fd1157b46208747f8f8940_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6a70a9cdf6fd1157b46208747f8f8940_JaffaCakes118
-
Size
919KB
-
MD5
6a70a9cdf6fd1157b46208747f8f8940
-
SHA1
ff6bb9dd467241ffe57f45a35586f2fd61e792c6
-
SHA256
91f498ad28a59564922d56d1b6c29fac6c97f706bea202be1d350813ad68d4b3
-
SHA512
59c07dfe6a6d6e99de236d533b601234494babe304ea505b79bfad5abd2a6e028d12c64bd9ca116f47f5275d2ff9c6c56d7ab14be82535d886ab14a6bc51cb89
-
SSDEEP
12288:3GP3xLdWHd+K2p5hizyo0LJ1JmcuCLBcI7ieBIwXRW4RryiJLpzpnnnLhUxj8hkI:D+t7pZzAQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a70a9cdf6fd1157b46208747f8f8940_JaffaCakes118
Files
-
6a70a9cdf6fd1157b46208747f8f8940_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE