Behavioral task
behavioral1
Sample
6afc511c0f4fbc547a8d45545ee4501b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6afc511c0f4fbc547a8d45545ee4501b_JaffaCakes118
-
Size
188KB
-
MD5
6afc511c0f4fbc547a8d45545ee4501b
-
SHA1
57590f9e353772167d05afe0eeb9812ff55ba6c2
-
SHA256
6f0bf97140e17eb410f5d713d597a146292bb54647a7b3d4de256393dc7afcdf
-
SHA512
aa3f83c9936874a2b154348cc4d374d06ed4353f42e3814a56e4835732745d3fd80d2f54d148bdcdc63f9538ab7eb4b13c80e8ef23a1ccf81d2e0ce4622bd793
-
SSDEEP
3072:TdEbNL/Hlx4Jszi/jGiwHS4hLkm5lhIOP409t6d/I70ISsMejWT5KHyYifo7oMQj:TalvX4yibFwHVoOPx9N70sHjWVKKuoJX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6afc511c0f4fbc547a8d45545ee4501b_JaffaCakes118
Files
-
6afc511c0f4fbc547a8d45545ee4501b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE