Behavioral task
behavioral1
Sample
06c591b456e13411f35b20bb6a8a4405_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06c591b456e13411f35b20bb6a8a4405_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
06c591b456e13411f35b20bb6a8a4405_JaffaCakes118
-
Size
8KB
-
MD5
06c591b456e13411f35b20bb6a8a4405
-
SHA1
cac48de2f2c4c606535158c1e8cdc4ec59ab5e0d
-
SHA256
599d338e056bf713fe44514fb41b83e308ad80beacd65d5338240fce36970318
-
SHA512
edbe49409dd2bf0dc6973298e55b87826ec49029e4e9436ca1dfdb6c0615abd57f84b55fe1e1300400493fba0a6065d8a4669325ad147d16dd291fa7eef282c1
-
SSDEEP
192:EU0gj/KAIGklfM+eF/QS3jkPBjyW2jpcPk:Ejgjh1x7Fj3j6BX8pak
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06c591b456e13411f35b20bb6a8a4405_JaffaCakes118
Files
-
06c591b456e13411f35b20bb6a8a4405_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE