Behavioral task
behavioral1
Sample
06c85ab4d2ad4538f51878a87cd5f047_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
06c85ab4d2ad4538f51878a87cd5f047_JaffaCakes118
-
Size
202KB
-
MD5
06c85ab4d2ad4538f51878a87cd5f047
-
SHA1
2eb26a6a28755180d7367d33a27d8b46cd98f1e1
-
SHA256
6ed43f8d9a9170af424d3d9ac2327faf92d68200764d372077c3d5539a861c28
-
SHA512
b4ca043f3e6183d51d463788e957d4b64c35a2e5fb34b60655d4cbfa89bdbc300e352335b4da3afd2f48643732d62ac9b1b1b0cf2ddd6d5bd42eac8aee5b76f4
-
SSDEEP
6144:OZC4d3lbxc6wU/UP+XhdMRFD3LAwektHoSAw:34dMRU/UP4heFjLDFtHoSJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06c85ab4d2ad4538f51878a87cd5f047_JaffaCakes118
Files
-
06c85ab4d2ad4538f51878a87cd5f047_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE