Behavioral task
behavioral1
Sample
f6dfb0099140f4a6ee4e28e0840a9f1a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6dfb0099140f4a6ee4e28e0840a9f1a_JaffaCakes118
-
Size
132KB
-
MD5
f6dfb0099140f4a6ee4e28e0840a9f1a
-
SHA1
a59a9b3db4bda5fd96ce6374078b81b196ab1610
-
SHA256
0f46cbbd6f490911c0b9267612d7af2c7814f2773dfa122de628eecc50a1f07f
-
SHA512
433935a3c4b4c887c16958f90b4437f1cf66fb0039b845341e5572c7e64bce094b7cc201f1bd60c8ad3feabe5573358fd8a797a73c00a7b48ee449844adf904a
-
SSDEEP
1536:1PpteX2CeB9GXuxf05UW3zo7vc+LAp7oq:1x0X2JB6uJ05UwIv5Ep7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6dfb0099140f4a6ee4e28e0840a9f1a_JaffaCakes118
Files
-
f6dfb0099140f4a6ee4e28e0840a9f1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE