Behavioral task
behavioral1
Sample
f01b6c565a5ab89c19819e234fe19995_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f01b6c565a5ab89c19819e234fe19995_JaffaCakes118
-
Size
381KB
-
MD5
f01b6c565a5ab89c19819e234fe19995
-
SHA1
b3201d66d36e4873f2a6f172964d7dd614bec945
-
SHA256
01045917e15f1645c739160ce1ab92e96c744cd9ff08be4208946f93d9879689
-
SHA512
0a89e813cb5a006ac777d11febcecf283eb5763b05e2461db687793cf88c150897c79499ef149fa5eab3651d51a1db271dc61e3abdcea52dae81229ed0fc6da8
-
SSDEEP
6144:RjUjNNlxmMzYlrX4ULDIt3PiPCqQFnSLTT+xD4rz1926cTfFEc8EMnkJgFYFa:RjGNfQMzMMUMpsCqKmn+V4rz19v2fgEe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f01b6c565a5ab89c19819e234fe19995_JaffaCakes118
Files
-
f01b6c565a5ab89c19819e234fe19995_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE