Behavioral task
behavioral1
Sample
6f14a05e44139d7e49f6979a96a62632_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6f14a05e44139d7e49f6979a96a62632_JaffaCakes118
-
Size
178KB
-
MD5
6f14a05e44139d7e49f6979a96a62632
-
SHA1
f83fcdc402bdef7c5e4e16db0212df83327181fe
-
SHA256
e6662782e3f630ffe3ffe07015b684e67ec3cb88b26b6d73383aadaf74795950
-
SHA512
751eb8bafa1f92d2b8eefdebc0975436385d2b10c77a6470652f58d4eb33dd363ac78ad1aba208984136cbbd94cecafae0999971d8a5bf85a4bb5a46fc3ad121
-
SSDEEP
3072:Aqy2xKID6YLGtofZ0anTUOz1z5CC5sXrU38XLicRPjrsSmODL9SLOqIvCzhF9Xod:dGtSZ0+uCGU38X/rzz9qOL4hoyKh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f14a05e44139d7e49f6979a96a62632_JaffaCakes118
Files
-
6f14a05e44139d7e49f6979a96a62632_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE