Behavioral task
behavioral1
Sample
f6bac721ce4dac2b6075e03b6e076978_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f6bac721ce4dac2b6075e03b6e076978_JaffaCakes118
-
Size
437KB
-
MD5
f6bac721ce4dac2b6075e03b6e076978
-
SHA1
ff8bcf73c8f36bca013f8a9097356052146c6049
-
SHA256
9c4a37f482f0bdb8d3f936671e02bb8eb5b488bc88241bceb06edea686a426a5
-
SHA512
5176c2090d6cff13f274bf895b8f961677ecc197c79ed6c500f79efd0ce226bfad28d26c0188d7285cc0aabb4b9114560bf3135d0cd2d4595b93e5fc5ef12d44
-
SSDEEP
12288:dJERp2dSl0l+Ot4SylU3g4w/2c7SLeC8S9jNJ18oSJ:bE2L+U4SS//S58S9x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6bac721ce4dac2b6075e03b6e076978_JaffaCakes118
Files
-
f6bac721ce4dac2b6075e03b6e076978_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 413KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE