Behavioral task
behavioral1
Sample
06cc80079c4408b32f8891737590cab1_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
06cc80079c4408b32f8891737590cab1_JaffaCakes118
-
Size
41KB
-
MD5
06cc80079c4408b32f8891737590cab1
-
SHA1
f69d40482a721b27865d5f041af42170635c24c7
-
SHA256
e0809617c713e2ef9df908c2423d425d0c9b1bdc0c805c8138ac585b7f532504
-
SHA512
6e5694fbcc856824b9aafd5a78ae1dd9179c6bd7bbdf015b106e247a5c702ec79f46d66052fd0969111476e2e8ca984d384f4952cfa520b00f2ede375e1c766c
-
SSDEEP
768:K9Zibsv3jMni8nc4SZcFQGswQCJLuNK1s17vU:K6bSTMnDcFm9sw5LvETU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06cc80079c4408b32f8891737590cab1_JaffaCakes118
Files
-
06cc80079c4408b32f8891737590cab1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE