Behavioral task
behavioral1
Sample
6ac45dffc298dc3db6d551f2b38b5135_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6ac45dffc298dc3db6d551f2b38b5135_JaffaCakes118
-
Size
80KB
-
MD5
6ac45dffc298dc3db6d551f2b38b5135
-
SHA1
80a66016aa7dce7f501a8933768a26ab5f8df6a5
-
SHA256
760aa317582459c639c6092698d47e9c32c7376ad6df021f2a93c17be73042bc
-
SHA512
ac014c7118ca92a1cdb01abb82b73af8af1af374e679dd854736f0187c0b2e7ff5ac8e76931f86ad061c9a617eb5fe9170958de7cc66e1347b87831f9d9d665a
-
SSDEEP
1536:z6I6E9c+38vgpDZJ3AXUn8Ivh+Q2Qa8yICVAvx6S4mt250dX5d2Tw7LT:zAEVDjuIJ+9R8yIsS32mdKTUP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ac45dffc298dc3db6d551f2b38b5135_JaffaCakes118
Files
-
6ac45dffc298dc3db6d551f2b38b5135_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KAO Size: 579B - Virtual size: 579B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE