Behavioral task
behavioral1
Sample
f6e913629752b980e3f6db84b7d2c801_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6e913629752b980e3f6db84b7d2c801_JaffaCakes118
-
Size
501KB
-
MD5
f6e913629752b980e3f6db84b7d2c801
-
SHA1
8cffcc14d2f94bba67fb42792f8818ab249cf6e7
-
SHA256
89890771e3b18ad38953d5bce35dcf19933096d5ef5bea7a2d8b41c83298f57a
-
SHA512
2a3b0bcbfff726c918090aebb459449fb50265a471f236c2f6b68fea1cd24216d03ab3b05cd37d7f4e5396a0f223ce47496328766ae1c9742714ed6ae50c4550
-
SSDEEP
6144:Gu8/qaNtNpot7u2sWJ2MnAyiYTYJ3da8gQt6rHJpj7:Gu8/qaNtslurQAyggh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6e913629752b980e3f6db84b7d2c801_JaffaCakes118
Files
-
f6e913629752b980e3f6db84b7d2c801_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE