Behavioral task
behavioral1
Sample
b60a59e0dbb8c70ae8f52437471a0020_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b60a59e0dbb8c70ae8f52437471a0020_JaffaCakes118
-
Size
121KB
-
MD5
b60a59e0dbb8c70ae8f52437471a0020
-
SHA1
1ecb6c341de57480a913228c37935452f3d90587
-
SHA256
51dc49e47d8b73245f9b7a243583c062ca010d7f0a2b4950986587cb6809ebec
-
SHA512
8061b409f33fbae35d0a6988cbe3acf57986a7c6d5b12a3a90f8e680fe42ef5fc59d34d9d3a81bfcaf72f8a4f31de9e5eac18d3681a81947a05cabe6422d011e
-
SSDEEP
1536:eKmcCnpdcpxM5DYKs4hao7axiyMvce7s6JyBeY3Q6JKJ6fx3bewmpDilrU7tUdTk:ec0LcpGpYONuevceY62DK2khr7tUd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b60a59e0dbb8c70ae8f52437471a0020_JaffaCakes118
Files
-
b60a59e0dbb8c70ae8f52437471a0020_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE