Behavioral task
behavioral1
Sample
6f1a31f84850dd57d5f2f7c887ca0b83_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6f1a31f84850dd57d5f2f7c887ca0b83_JaffaCakes118
-
Size
82KB
-
MD5
6f1a31f84850dd57d5f2f7c887ca0b83
-
SHA1
06f51fa773ea40bdfacb1ee4a0a0588e7355a978
-
SHA256
491eb9f57c7481d0f3cd34ccf040228e191d56ef0868738c35cb4d240cc3cd9f
-
SHA512
c261fd40be50e2c6a9b8690ea461d391ebb1ffb82ba8f8431b96dd6ab8a346b81f5d5676e9bae9997861dc82e17fb20eebf1f93310512ed7142e01f7ad416239
-
SSDEEP
1536:wSntlO/SruNURUu1aEn6Wbw+CQCp368WHiujCyKc5D7/GPSppjfwfUWkSP7s6xED:wglrrlKu0En6Wbw+CQAdIiujCu5DoSpr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f1a31f84850dd57d5f2f7c887ca0b83_JaffaCakes118
Files
-
6f1a31f84850dd57d5f2f7c887ca0b83_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 504KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE