Behavioral task
behavioral1
Sample
9399a7b4d0a7cbfc297b2f9d29e53383_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
9399a7b4d0a7cbfc297b2f9d29e53383_JaffaCakes118
-
Size
161KB
-
MD5
9399a7b4d0a7cbfc297b2f9d29e53383
-
SHA1
aecdc665d7e0ed7c7a7ea0d23505ebeb2abf609e
-
SHA256
f873a127a09b28b81256c4e0384e0736ae98fe5e9297e2dececa63815fff30ac
-
SHA512
81707d08c4588d8ec4114d240d3a6a04cb8f6e5bd44ac424b3d454d4173b7036e5a3dc05fb9d3f5e1df073703afa8e687bf4f9180f759a42f3a452cce00bb777
-
SSDEEP
1536:Mf5L9f6N3AeizQo88ShGa6QNcxQdrRW5x9E7kCvcyfARX7eM7bDO50SAHh8AeuKs:O5pf2MQ85QNcdaOHRXb7POkhau0sF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9399a7b4d0a7cbfc297b2f9d29e53383_JaffaCakes118
Files
-
9399a7b4d0a7cbfc297b2f9d29e53383_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE