Behavioral task
behavioral1
Sample
b6ed9f1aa5071d32cb7fb24196ac74a0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b6ed9f1aa5071d32cb7fb24196ac74a0_JaffaCakes118
-
Size
397KB
-
MD5
b6ed9f1aa5071d32cb7fb24196ac74a0
-
SHA1
0f871899a8316eb83e3087d9145c361956691dc5
-
SHA256
b9aa6f91137b50c384ecf6b0e1c1bb5eddc9ae020ac4fd4db1879327e59f5952
-
SHA512
b4f8c56c7ebdb8f2e2842e0f8e08b02e514529e9c5c8b0a32bcdeff21d3c3998ebdbb6f1aca37665bd749f053d0c529f01a7f823c9199f1473e702fc08718350
-
SSDEEP
6144:Xq2RPYO5hQGNN2zdArxJMDjz0R+rugnJz5eom7FkF7wi:aaPYOXQGNczooDv0R+K4Pm7FkF7L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6ed9f1aa5071d32cb7fb24196ac74a0_JaffaCakes118
Files
-
b6ed9f1aa5071d32cb7fb24196ac74a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE