Behavioral task
behavioral1
Sample
6abfd3e863927129effd747042b244b9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6abfd3e863927129effd747042b244b9_JaffaCakes118
-
Size
12KB
-
MD5
6abfd3e863927129effd747042b244b9
-
SHA1
4e22baa1a32cfc17797603b54babff9b863afa93
-
SHA256
ea0ccc4e024c4afc6f32158e1ec1dff07d016feb87139f8bea77ea3176b199ea
-
SHA512
1f0b6e3afd4d6017b4b90d5be410cf57bf74eda70da1277cfb774ea0acf95a88409d2bfc3f97189a304322e571a8361715dd76e670a5251b56b8dc81f1365c64
-
SSDEEP
192:iX2X+hbbBY0MSN4x089E+2wmiTeUES8YcLyClQa2u2yl9an5NPgEv:iXW+DYuO089E+2MTj72yEnl9pG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6abfd3e863927129effd747042b244b9_JaffaCakes118
Files
-
6abfd3e863927129effd747042b244b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.%$ Size: 31B - Virtual size: 31B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE