Behavioral task
behavioral1
Sample
069d9d95ca99c0bcd8cefe577314350b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
069d9d95ca99c0bcd8cefe577314350b_JaffaCakes118
-
Size
332KB
-
MD5
069d9d95ca99c0bcd8cefe577314350b
-
SHA1
d0f3f9a167bbd349ebf005eda336006c3bfb3782
-
SHA256
6d69f8c24cd15fb524c2a30283de620e70bb77c9793556e24c7a8d87331daed9
-
SHA512
964fff72784d1234e3ea0f7108118d55470f6b7061540fc320fe3414c5a067d8f73c5a1276b3a2c82b90c4abc017652c96fef18e9df51a7223dcee4c48374413
-
SSDEEP
6144:1YoYkXCmIJghOVs+sF60T0trwGPtylLuSAcY1swGY6mLxwUxaNHmbRJ0eJmMlQOB:yEP1p+sF6e0J1jjcY1swOmGOaVmbRuuh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069d9d95ca99c0bcd8cefe577314350b_JaffaCakes118
Files
-
069d9d95ca99c0bcd8cefe577314350b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE