Behavioral task
behavioral1
Sample
f6b906be85b35e679fa932e4f7ccb1a1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6b906be85b35e679fa932e4f7ccb1a1_JaffaCakes118
-
Size
183KB
-
MD5
f6b906be85b35e679fa932e4f7ccb1a1
-
SHA1
718ca3d164d35c8b5b2f6f27ca2e3f46ce2db08e
-
SHA256
bfb3506bfb7fd89663fd38a2d541944e2628557d3587c494f2ba36368bd20341
-
SHA512
dc22e344ba683665805bac92914642f3188aa74bca6f3fa39b6e5907bc9d37d994e720732ce53920367e7efc0ee5eb2a96bb2d1474d99b07c04cb77dc5e71efb
-
SSDEEP
3072:EamFnQYUM6m3SP2sVSdEnfWZN3cbgonk9sX1qalYuhLJNdjQVVTuP5J85Vi9iqV5:Eazq3aipalYuhoao5sQkzXrx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b906be85b35e679fa932e4f7ccb1a1_JaffaCakes118
Files
-
f6b906be85b35e679fa932e4f7ccb1a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ