Behavioral task
behavioral1
Sample
6f4e6db0a0be1a6a2d81967b8094eb85_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6f4e6db0a0be1a6a2d81967b8094eb85_JaffaCakes118
-
Size
854KB
-
MD5
6f4e6db0a0be1a6a2d81967b8094eb85
-
SHA1
8154931a6eae107b84d461d9745a7531a14c2dd1
-
SHA256
db975e3677c0466e1d9bab852cca0abde0de2a7c734a37c47a053f73f59142a2
-
SHA512
89080841fa9a39ff5e538e31918e4a3fe259f30ad54b44f6c47b1452ccb89e5d1960e34f39627631ea12b9ad8ce56cb1a35db3ceac119173c8faba5d92c12bbc
-
SSDEEP
24576:7d4Y9fT7g/nMtZcE5S+uDfXJrUsG4mpw7w5GJ:p4Y1T7gErcEQzzpUt4epo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f4e6db0a0be1a6a2d81967b8094eb85_JaffaCakes118
Files
-
6f4e6db0a0be1a6a2d81967b8094eb85_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE