Behavioral task
behavioral1
Sample
9480b0f8376b8d2e9473aba41521e709_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
9480b0f8376b8d2e9473aba41521e709_JaffaCakes118
-
Size
1.1MB
-
MD5
9480b0f8376b8d2e9473aba41521e709
-
SHA1
662d7a231604268f8c2777663b5d0d1d54db2615
-
SHA256
cc2c86ea55a76afbc0e10a73bf603d0fedc5762cb5c2b98360e570a85933a73c
-
SHA512
f7ec7a497422e5b84ca1f510e32df3a9a6a1f57318e899f3dc2892b39ce9b62a21de65cf25fe88d24cf83e7d481afd7e540d5536bb0e48c3c3f8d2b4ecb306bb
-
SSDEEP
24576:sGySEAIC3JVy5cuVafy2GiqTmldTKTC4J0GjQ:szSJIQExV+nqTcTKTLU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9480b0f8376b8d2e9473aba41521e709_JaffaCakes118
Files
-
9480b0f8376b8d2e9473aba41521e709_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 538KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE