Behavioral task
behavioral1
Sample
6ae088806fd7d5111907641b1b6c70e8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6ae088806fd7d5111907641b1b6c70e8_JaffaCakes118
-
Size
71KB
-
MD5
6ae088806fd7d5111907641b1b6c70e8
-
SHA1
ec75f0bb2779920be5daeae6e406b70f495ffaa2
-
SHA256
35e588c2fe47c7a07959c420c037219eeacd191aeb8f94f5cf0c1e0e19ee5a19
-
SHA512
8f11e9b7113222b0d9ddc0ab8b29f294d5bd7c6125de63c908136ab9dcd63a9e62b272da8be9c024afea5dc112efe9152838dcec487320eafd69d2a759fa2596
-
SSDEEP
1536:yONDy99iQgzrHy8B8EejbGOjcLrYfFqy12SwomTNy6nouy8CG4:lDM3eOJfoy1yomTXoutCG4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ae088806fd7d5111907641b1b6c70e8_JaffaCakes118
Files
-
6ae088806fd7d5111907641b1b6c70e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE