Behavioral task
behavioral1
Sample
063c40b00a90e7e8d7081fb3ca088341_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
063c40b00a90e7e8d7081fb3ca088341_JaffaCakes118
-
Size
288KB
-
MD5
063c40b00a90e7e8d7081fb3ca088341
-
SHA1
1706b514d22c0d896230f434abd46734c7ac3d68
-
SHA256
1fe8c9d76b1b2e20335deac428f9e998be42bd8968611954c84a1da67fccb00a
-
SHA512
09bab849ec7a8dee0afc9f65e60591f208fc1dc5a45f1f3e827e9d30d8cc73789265693d1416ef6717dc5bdaa2e288e7ec92e9d14da42b85bab07a20ee58bee8
-
SSDEEP
6144:Jx46Fcie0x3iWRgcYzm9BCXjDs1WodWvVcTlAfJIylsvkP5R3blGBrj3pGqSgEk7:HzcieW3tgcYoBkjI1Bk6Tmx3hPTrotb/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063c40b00a90e7e8d7081fb3ca088341_JaffaCakes118
Files
-
063c40b00a90e7e8d7081fb3ca088341_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 856KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE