Behavioral task
behavioral1
Sample
a06d2d3c1c27206aab7858bc0dba8b25_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a06d2d3c1c27206aab7858bc0dba8b25_JaffaCakes118
-
Size
167KB
-
MD5
a06d2d3c1c27206aab7858bc0dba8b25
-
SHA1
6cb9ecb853ff64e45bbcf71f815d4d1a48d643f7
-
SHA256
79946e6f4a12cfc15534a9a305604286b9700ae10293b913d071def7ee73a3a4
-
SHA512
5340089f276695b6e2a81557be907fa0c665e7a77dabb8def814e17869a3b2d86493a9e69e087fca217e31b8999837a2969827f59aae06fa4e5acffea55d5efe
-
SSDEEP
3072:P55UdQJvAUqsQixbm6tG0gkWAki3Mk2MG0cQS1ctoeYyeRb8CdfWsEFPouuJf9Hk:PYSvtqpixKB0gs8k290A2tovbVd9EFwo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06d2d3c1c27206aab7858bc0dba8b25_JaffaCakes118
Files
-
a06d2d3c1c27206aab7858bc0dba8b25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE