Behavioral task
behavioral1
Sample
9521a6953bbb1e8483169d592b35bba7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
9521a6953bbb1e8483169d592b35bba7_JaffaCakes118
-
Size
784KB
-
MD5
9521a6953bbb1e8483169d592b35bba7
-
SHA1
b6598db4ef91993128c931b01a988f8957710a08
-
SHA256
bd4f097c9641b439e5dc1c8fbfd31d2718e29ab14e8fc2fec80a510e205d9c84
-
SHA512
79030a0c82c1c52db028c1f657742beb059757b4e010d63281dfa90b0da0d570380526d2033f0c368c9d3ce408699006d8564f85a9588ffbe462b24239299926
-
SSDEEP
12288:ZLbbwG9fWI3PbJnL80mR49psyCCVkxAi/sBVTsbrft+mLwKGFW4DCG2:Z3b9WsDTns7EkxhKwn1+r24R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9521a6953bbb1e8483169d592b35bba7_JaffaCakes118
Files
-
9521a6953bbb1e8483169d592b35bba7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE