Behavioral task
behavioral1
Sample
06c4ed705ed1f5cfe51327374707abe6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
06c4ed705ed1f5cfe51327374707abe6_JaffaCakes118
-
Size
83KB
-
MD5
06c4ed705ed1f5cfe51327374707abe6
-
SHA1
90c75e354b668f6fa15d64402e278296ea81b545
-
SHA256
ba5fb836939e66567a210fc1fd224298ebc8598cc9651962434acd4e3008d2f4
-
SHA512
ad7092026098f322f2c535894d02a4a5b2b409ab99640fa26e48caba4cddd81b26c956a56d17716152a992f076ce46ba1a80f2940bedce5afdd49bf91a04c56e
-
SSDEEP
1536:RUSH25FZFBuWwh3n6r2qZom4XxStqydxzVq/1vWWG/gJAk4EPJDXbXCO8bvC7:RM5FZvuWGX6rqYt3bRqtW3gb4EPAjv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06c4ed705ed1f5cfe51327374707abe6_JaffaCakes118
Files
-
06c4ed705ed1f5cfe51327374707abe6_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE