Behavioral task
behavioral1
Sample
ff6a436e284cf75d6098391ef8a7d3ac_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff6a436e284cf75d6098391ef8a7d3ac_JaffaCakes118
-
Size
420KB
-
MD5
ff6a436e284cf75d6098391ef8a7d3ac
-
SHA1
523ca1f1e28eb603e44dfa390d9fe694b74f4353
-
SHA256
857b18a6e5535405332b0a7d5da4b5ef2ffbd329784ef88b1cea08ebeb0edf0c
-
SHA512
f5ce4af6f5f6816fe816e483251f93aae4d440797fe0714732a5488e8ba36bbd66f71d45d33dd28a57e96e09ec5a5e781bb6736cacca3367b245e4fc4850ff98
-
SSDEEP
6144:7TuvU7B1YtBJWz+HuUIc3T1JBlRQRfwQLwfOt0zGhpw4ypzyklUJoSz2:X1wt/WklIOlkRGOt0zGhWOk+JoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff6a436e284cf75d6098391ef8a7d3ac_JaffaCakes118
Files
-
ff6a436e284cf75d6098391ef8a7d3ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 413KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE