Behavioral task
behavioral1
Sample
6ff7586fcf62ae3e7b33509528a2c00d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6ff7586fcf62ae3e7b33509528a2c00d_JaffaCakes118
-
Size
214KB
-
MD5
6ff7586fcf62ae3e7b33509528a2c00d
-
SHA1
eeed0ebdab0eecbe9b6a269a99bad87567b49fca
-
SHA256
771849255ec187f3bc81186f11d3af9e24f3538f56ca8dbbec30306e380e7807
-
SHA512
a2cbf7cf983fc822b463e6b98a185eefac07b4161ffa19e2931b1e00e0a2472bf9a26ebe2aadeb297afd06fe04495c862b8131fa5c4bfb742a5799f433766924
-
SSDEEP
6144:RjskQ+6VPRBSz+x5GQinNcKwPOaS7foS:x56XBSz+PAXwDOfoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff7586fcf62ae3e7b33509528a2c00d_JaffaCakes118
Files
-
6ff7586fcf62ae3e7b33509528a2c00d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE