Behavioral task
behavioral1
Sample
6fb20d30e1fbd30fa619f6b8ba99826e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6fb20d30e1fbd30fa619f6b8ba99826e_JaffaCakes118
-
Size
44KB
-
MD5
6fb20d30e1fbd30fa619f6b8ba99826e
-
SHA1
fb61f9a42ea25ebdb332b3670b4805707096a2ab
-
SHA256
91704f61aa252eb6ca08a01b40d5c774a9b0d7530837a3769b439fcd381a4fcd
-
SHA512
9d337d25a0b4eb5b2398500e0702e4206b773ab3e4d411bfd4b6aa8973113bef284b6c75bc17c490d2fb6920caa5a5e657c7f1b94c41cd5f863b3aea573eac33
-
SSDEEP
768:/uDJfATEE6pJ157NnJT/4Db7SCDMA02MjdotJEL:/k9W6pbZNJEHCjdO2L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fb20d30e1fbd30fa619f6b8ba99826e_JaffaCakes118
Files
-
6fb20d30e1fbd30fa619f6b8ba99826e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE