Behavioral task
behavioral1
Sample
006f80b2e2a79f6155d0ea9e89f8f4a0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
006f80b2e2a79f6155d0ea9e89f8f4a0_JaffaCakes118
-
Size
618KB
-
MD5
006f80b2e2a79f6155d0ea9e89f8f4a0
-
SHA1
56b6eb5b43f31954bd9fe6a8becaacce873f7f94
-
SHA256
7a97e0ef3d03fa062ca26e9273214c73297ac1cbdf8d0e158a247d2385a74afb
-
SHA512
c2c8f8b5c91e16550ec5dac2db796108b28977a7155a2f64ccacbb50d09430b8620262c589dc9a7ce1f3ff538b6350baf4f3a2d5b38c7fa96a4d37a96c586db2
-
SSDEEP
12288:yY6RZow75A88stf2YFSNcYjYbK2xaIpNUhsLk:yYRw75A9k2KSOYjmK2xaTsg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 006f80b2e2a79f6155d0ea9e89f8f4a0_JaffaCakes118
Files
-
006f80b2e2a79f6155d0ea9e89f8f4a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 583KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ice Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE