Behavioral task
behavioral1
Sample
f6c036fc55bd2647c9588b7bf368b12c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6c036fc55bd2647c9588b7bf368b12c_JaffaCakes118
-
Size
208KB
-
MD5
f6c036fc55bd2647c9588b7bf368b12c
-
SHA1
95dd8be6cb9daf55663cb73088509a59dd80ee86
-
SHA256
1a9bc1505bd4870427e11de06fd1504536a7729356ac2172df86062e133669a1
-
SHA512
f9b8af510d32d3dfd205231b975594622acd3a0e5908660d8de27df5c943ecd06741e60b37c923bcde635cf89e3a8aea6b942edb60680b7a9870fe7d4ac072ed
-
SSDEEP
3072:TKQ0omLt1t8LkF5Zu45ftVjKVGIx7JgtGCq4mZLXZird/:AvtrN1PI5LMZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6c036fc55bd2647c9588b7bf368b12c_JaffaCakes118
Files
-
f6c036fc55bd2647c9588b7bf368b12c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjg Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE