Behavioral task
behavioral1
Sample
6f7cfc33b6873fe5f30a91d19a867afc_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6f7cfc33b6873fe5f30a91d19a867afc_JaffaCakes118
-
Size
407KB
-
MD5
6f7cfc33b6873fe5f30a91d19a867afc
-
SHA1
7b2da660b3e07e62d7b5464d3e6b5885f223b0c1
-
SHA256
ba6e3a60669abc9c142bdbd5b13b9752457615a1083647bb7d5a02bc77940840
-
SHA512
b0c38c7d2aa052f59956e7a813024511d37776c941e9c9cd95ab5233a1873ffa397150b232e81e58f418a8c6d4a2b841b91bfec54d022bbbdbb39148631eb67a
-
SSDEEP
12288:J0POlf+sszXlYquOHpoSwQQ0A817chYqATSTU8jhSN:OasyM09T8Rc27GvNSN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f7cfc33b6873fe5f30a91d19a867afc_JaffaCakes118
Files
-
6f7cfc33b6873fe5f30a91d19a867afc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE