Behavioral task
behavioral1
Sample
9c0f1ec07b76c882226277410a1888f8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
9c0f1ec07b76c882226277410a1888f8_JaffaCakes118
-
Size
5.8MB
-
MD5
9c0f1ec07b76c882226277410a1888f8
-
SHA1
e91a3ca940ca6b9e60ac55be4a78b3c6b7085cbb
-
SHA256
96850e561fe9c168d2e7db7d89eb799e1e2e28f41fda87e5a6f45076cb983218
-
SHA512
68d91734930cceca9974626c92aff75b0307b7003264f1c227b13b38b631cfc3297986b8a0265bb5ccf1d215a306a3d20ccdbb9043890d45cc67d9ec469aa47d
-
SSDEEP
98304:jJdLLBuT8BQ8J8kCzg2x5AO6ly8XyJ33uy7De49SYJqFzJaAE:j7Lo8Bb7AwO6lyJD3AFu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c0f1ec07b76c882226277410a1888f8_JaffaCakes118
Files
-
9c0f1ec07b76c882226277410a1888f8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE