Behavioral task
behavioral1
Sample
b9a4f2da67c7393e4b154b79658d70d1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b9a4f2da67c7393e4b154b79658d70d1_JaffaCakes118
-
Size
56KB
-
MD5
b9a4f2da67c7393e4b154b79658d70d1
-
SHA1
11a81a42c6ce8a160afdd3f85c0320f8b988e650
-
SHA256
df7cd668a167468e4b533eefe14765b544c4cae44cdddcd751b1d39aad38259a
-
SHA512
d9e4ff8a1c457de54a9598e311226a1e20d3838fe70d994d6f199e161329d3fd1fe556883beabb115604f916cfee41d93163b8325cc498ff48683f2775eb933f
-
SSDEEP
768:i6qeK2RgCi8ZQ3jwufedGAEFp1UQ+fvlO1vIDG0yP4qZ7Se8BCcbsb5b:Y0ricQ3jRu/EFbh+FO1vIa0Nu7SNB7i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9a4f2da67c7393e4b154b79658d70d1_JaffaCakes118
Files
-
b9a4f2da67c7393e4b154b79658d70d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE