scan
Behavioral task
behavioral1
Sample
6f9295fb426736d5d8d6e367e6dd797d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6f9295fb426736d5d8d6e367e6dd797d_JaffaCakes118
-
Size
17KB
-
MD5
6f9295fb426736d5d8d6e367e6dd797d
-
SHA1
c86bf8a13f9830b269df1c41391b4c4641c7bddd
-
SHA256
74a194dc22762c78990fbb75e925e55784385690b59345d9a7d9fad6e62dfbdf
-
SHA512
620e4bdd81b15a0fa23273cad5e73fcfc43ef846701f7efd13d6526c202b2dfcc4d85d8384155287503591763d14d508aa394e9f914a4460acbbc4054d2a74a5
-
SSDEEP
384:uQTdRVE18BjRfEuOkCnb9rX+0ubq2Hy1xo/Ug3f:BTdRVLBjiuOkg9l2MgP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f9295fb426736d5d8d6e367e6dd797d_JaffaCakes118
Files
-
6f9295fb426736d5d8d6e367e6dd797d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE