Behavioral task
behavioral1
Sample
ff6b2f787f56d2fb8ece376909029a48_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff6b2f787f56d2fb8ece376909029a48_JaffaCakes118
-
Size
190KB
-
MD5
ff6b2f787f56d2fb8ece376909029a48
-
SHA1
6935c9f105f11d4135ca02055f5b8b7f903794d6
-
SHA256
4002333423871c635a1d9da57a19b6c19802ca8006c7a28b2232cac8c35ed53f
-
SHA512
6ac187983895da018514915a81a70260cfe4b4f5e623dd469d88c3378103010801cc1ff640f400ec6b973a5966742eae98cfafb7067d41fc2b6429b4801789b8
-
SSDEEP
1536:KS3Knj8Yu0xw6nh4lMSDL+5vc5v6a0ViliWkWeZpMEeM:swqOC+7iViliWkWe4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff6b2f787f56d2fb8ece376909029a48_JaffaCakes118
Files
-
ff6b2f787f56d2fb8ece376909029a48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE