Behavioral task
behavioral1
Sample
9695ca95d96b89029cee31360eabda14_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
9695ca95d96b89029cee31360eabda14_JaffaCakes118
-
Size
279KB
-
MD5
9695ca95d96b89029cee31360eabda14
-
SHA1
0f6609a3c0a423aa4169fbd3dd1e7e5bc18ec724
-
SHA256
1b773f957d1511aa6eb2e33e190df0b97966d5b1fa9a804245cc9cc452efef48
-
SHA512
cd95d8e15e61f1e11c586a970a7eac18246f84953f8fa07724c2c840ec8d935721d0f07f88666e657c3a3d7166b999de0ec8c9eb1307470886e5ed7ae7d36323
-
SSDEEP
6144:hWVG8tSnzK+mW52LFxzl+euuLql0gQMrAeASjUmV5:j+RWCbl+eql7Qf5u5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9695ca95d96b89029cee31360eabda14_JaffaCakes118
Files
-
9695ca95d96b89029cee31360eabda14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE