Behavioral task
behavioral1
Sample
6f7fc5aa023e3ee81619f6eae4c1d577_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6f7fc5aa023e3ee81619f6eae4c1d577_JaffaCakes118
-
Size
527KB
-
MD5
6f7fc5aa023e3ee81619f6eae4c1d577
-
SHA1
f5819cf3506556793216b0ad0c14d691ce8248ed
-
SHA256
24411321e1fef93af22c516b7d1012c899de5cd3db44f900bba6acb005f39d48
-
SHA512
91190966132a1f1c9fc80c9ce3282ec832309379f6ccc6af826f86ef939af293b63da6dc715d5a2f05d1484acfc4dd21cd4806dbd9659402a375cd6ec4ca54ad
-
SSDEEP
12288:qx44e2/19BSItKWl7IA26js+iXTzvW9JaECb2nmVbtWWi4h5JRY2U2xf:qC+vZtKWc7hZD8JaECbVwWtg2x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f7fc5aa023e3ee81619f6eae4c1d577_JaffaCakes118
Files
-
6f7fc5aa023e3ee81619f6eae4c1d577_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 944KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE