Behavioral task
behavioral1
Sample
f06523aafdbaad6f7301f486221b4267_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
f06523aafdbaad6f7301f486221b4267_JaffaCakes118
-
Size
585KB
-
MD5
f06523aafdbaad6f7301f486221b4267
-
SHA1
f1093f54e905b4aa835405df3c9e1f71d6ef40c5
-
SHA256
c1aeec4cabf006902c8bf039170464583add585a8bd3a4513cc7791421fcc68b
-
SHA512
6fb530855f52b1438be5f20f43a71541e656092e82108429406455df3248600927da6c2f243a0949d1da71ff6144aee2dbf1ba9b64ea8bab88b129872fbe0d19
-
SSDEEP
6144:RrTUGXDncBO9CRvpnWA2Q4qLpBZFQNmmN7Am12oSD3xOn23xOnc3xOnq3xOnm:/zcmEnv2QHTZFajhAmQoSDU2UcUqUm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f06523aafdbaad6f7301f486221b4267_JaffaCakes118
Files
-
f06523aafdbaad6f7301f486221b4267_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE