Behavioral task
behavioral1
Sample
9500713e1dd840cb69196ab474272eb6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
9500713e1dd840cb69196ab474272eb6_JaffaCakes118
-
Size
524KB
-
MD5
9500713e1dd840cb69196ab474272eb6
-
SHA1
b651a349629c19dd3f9314c90e12c87d48e4fd98
-
SHA256
b3b2a5f692b408b5e0c419bc6d08da6642f3f25e4de83e31131e469458cde759
-
SHA512
92ee1c5236d07de5bb7434ab53e6a70501a5cb1f11c4242d6e09494f11453d07da9a3f01d3e7cc9ac9e1259a26c3e38b43b1e1c13e0a859ac4c5c2854c6813a2
-
SSDEEP
6144:FJgYBAczY2H90EUgQj+pOIJaj3f0PytBx6+HEym52lllcwPfrbK/Ek6uf7dVd2vs:NYfgR+kP8lb+/Ewdyv+79s18pn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9500713e1dd840cb69196ab474272eb6_JaffaCakes118
Files
-
9500713e1dd840cb69196ab474272eb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 258KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE