Behavioral task
behavioral1
Sample
9630434c4b911d5940e3e47e5468551a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
9630434c4b911d5940e3e47e5468551a_JaffaCakes118
-
Size
11KB
-
MD5
9630434c4b911d5940e3e47e5468551a
-
SHA1
cb148b1aca28a3380adac2d11fc0f69a0e223a1a
-
SHA256
38b1e2174261c92f3a81bb38880943a8189dc5c628b68a318f9b53242c5e7164
-
SHA512
e7885805e9381995024c072f7083cead4ca6bdfef275e8a23b8d0e1bbcf0b0c8780c21f367ba69fbda0d973a60877c06735233c06226d389c537eeebb8368e4a
-
SSDEEP
192:Q0p1VRJ0VQ2lgUxW99N2Z35uZGnHV9Tu+UZXNFaNJhLkwcud2DH9VwGfctkXM:PD2VQRYW99N2952G1Yx7aNJawcudoD7E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9630434c4b911d5940e3e47e5468551a_JaffaCakes118
Files
-
9630434c4b911d5940e3e47e5468551a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE