Behavioral task
behavioral1
Sample
6ef11103ab86c94c5676f990a78fbaf6_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6ef11103ab86c94c5676f990a78fbaf6_JaffaCakes118
-
Size
73KB
-
MD5
6ef11103ab86c94c5676f990a78fbaf6
-
SHA1
ba1d39b1586f191776c2ab153f1c48d1b8f75548
-
SHA256
f1f89796b347358b390ec966ddb29e9ebdf461e6cb6460c2d810e53b02593295
-
SHA512
d9640622f52e885f01486b17dae0ae38753875a9ae7ad2693dea163828eada10acb7a6edafa91bd11025951cd774bc069d20f5ce8fb416437bb539d31b815f82
-
SSDEEP
1536:u3j4thNmc8wYYhfBTDeKHivKTakW+UicfCpF1Ng:kO0c0YhZGGMKXWBhKX1K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ef11103ab86c94c5676f990a78fbaf6_JaffaCakes118
Files
-
6ef11103ab86c94c5676f990a78fbaf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE