Behavioral task
behavioral1
Sample
a6c36140826c7538bc00a6a396d6cff1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a6c36140826c7538bc00a6a396d6cff1_JaffaCakes118
-
Size
269KB
-
MD5
a6c36140826c7538bc00a6a396d6cff1
-
SHA1
af2220ebab5432268e523030e2e7292262f032f6
-
SHA256
bfdfa7e0bd029cc8c21fead4618abab87b856d4cf25e30af0d588518628bf35f
-
SHA512
e6d011f5020e433885eee68dea596517454e54aded3a5fbb7dee4395daf873f59859e6692e9e2e2213fd6117c00cad3bd61793aaa23766003670a6e5d97f793a
-
SSDEEP
6144:sCCEZBKePXkMBFrD7ODZJ/dEPJJWSTDwqwxLWjylgvFqoSki:sw4b0r8J/dIJJHlSXCgoSB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6c36140826c7538bc00a6a396d6cff1_JaffaCakes118
Files
-
a6c36140826c7538bc00a6a396d6cff1_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE