Behavioral task
behavioral1
Sample
9407b2f57ffc140bf4e913848f60601d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
9407b2f57ffc140bf4e913848f60601d_JaffaCakes118
-
Size
2.3MB
-
MD5
9407b2f57ffc140bf4e913848f60601d
-
SHA1
eb53ba5ccd35b9889cb11534f415c11a8a66c05a
-
SHA256
e56a47aa786f4fc52b589be3f7e3b611ed307d1d7c5b2e771be498568e4ccc94
-
SHA512
02d320b8b08f0c73ab59798e193242bcf6ca9140abf749d6d79c3a2b617ca1942281bf1aa7eed03bc4de07476f886f40a5c8b06d848dbef31e883211c5fa973f
-
SSDEEP
49152:UMvVmuodmQ1/JGliK83gYpBrSgIB+Ulq8nzD8CCCW:UCoF1/l35pVlY+Sq4ACCZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9407b2f57ffc140bf4e913848f60601d_JaffaCakes118
Files
-
9407b2f57ffc140bf4e913848f60601d_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ