Behavioral task
behavioral1
Sample
f0a6c12ce38ee966fc28f227bbc234cf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f0a6c12ce38ee966fc28f227bbc234cf_JaffaCakes118
-
Size
250KB
-
MD5
f0a6c12ce38ee966fc28f227bbc234cf
-
SHA1
5946744684a46c6e93d504b72b9ccb6ec8814e8d
-
SHA256
9d1e01c2ae5596184aadd1db56b0ad97d31fc6223509c17f77d64049e546b2ae
-
SHA512
585d783a9e13c40f1c6c71d345db8a8b1c9f97417635a6855a2e653a7bdb4245616d91b2cd6688d495c36891257ac61409e39638ef10b605d99645abbfeb4a03
-
SSDEEP
1536:Dq4SAMhrftF0+gYQKlHu4aMpV6nzbaoi2F+btWPhsolye58r2FXOXq6+Il852FDn:DqlAdYQKenP62iYPOmyNitmq/Pk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0a6c12ce38ee966fc28f227bbc234cf_JaffaCakes118
Files
-
f0a6c12ce38ee966fc28f227bbc234cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ