Behavioral task
behavioral1
Sample
6ac157274c0effdd034b05c8017d88e9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6ac157274c0effdd034b05c8017d88e9_JaffaCakes118
-
Size
213KB
-
MD5
6ac157274c0effdd034b05c8017d88e9
-
SHA1
595495708d258c0aeaecf6ecc1b196ba8084c284
-
SHA256
9804d2c350a6650252455ea00acef9feab6a712f8d6673d9b80e423bfaf4c02b
-
SHA512
d1ceb5cbdb5f99c896bc64c61665939df426b0f0dc8a76e0baafb3c0e63cfa5a781932d65f9b2d6cf4145284aa927dfc68bb31b0e35feef6048b36067564a93c
-
SSDEEP
6144:13RWxheRrR06otaKTgkoHG4WIDToVyLV8EoS7nP:/3Rl8tndwQyR8EoS7nP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ac157274c0effdd034b05c8017d88e9_JaffaCakes118
Files
-
6ac157274c0effdd034b05c8017d88e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE