Behavioral task
behavioral1
Sample
b6ce569246e48b550c79c42f06e15e8d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b6ce569246e48b550c79c42f06e15e8d_JaffaCakes118
-
Size
12KB
-
MD5
b6ce569246e48b550c79c42f06e15e8d
-
SHA1
b4ef2c2159a91e5fb96213bf3c41e8abc27f8c3b
-
SHA256
bdf737de13d5ab41afbfea909f9cbc9d622fb64240e30b969ddb58896812d234
-
SHA512
3893111b3b474d122527a48fb99d96d000bf1fb068fa4c3c3b12f8131e13cd99a5cb407d3431874b6c5412954bf37fd37f6e298d258c67a7a5d3a23eba7eb5c4
-
SSDEEP
192:MLxMvaR+1Sg9oXACow0jDlj9bX2qVkIpzkRkARcbzqvmIaGI6XmSXofu:MLxMvaRW959DTX2qVQZR6zqjGgmDfu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6ce569246e48b550c79c42f06e15e8d_JaffaCakes118
Files
-
b6ce569246e48b550c79c42f06e15e8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE