Behavioral task
behavioral1
Sample
6fb2ff16a35f6f06dba159b996369557_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6fb2ff16a35f6f06dba159b996369557_JaffaCakes118
-
Size
1.2MB
-
MD5
6fb2ff16a35f6f06dba159b996369557
-
SHA1
047e5b82f7622246d2aab0855847715126bc7a69
-
SHA256
f6acad4bf921bfaf839f7042e1e21f3997a222e032e972cfe4ab121e6ff08315
-
SHA512
2ddfcfe104fe21daafd4d62266dc6f4747d9df8005813266e80c4cf3dfabaf0be8b652cd9b5e3a92f3eca699aa5880c0b7cc9db2fb6715a797352877221fef99
-
SSDEEP
24576:lI2VVvUUsSE+GpIN7XvD+xCHhMsEMJiwVrLt0Da8jRS:lIAVvUbrpM7fDcOh9Ji4rLWTE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fb2ff16a35f6f06dba159b996369557_JaffaCakes118
Files
-
6fb2ff16a35f6f06dba159b996369557_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE