Behavioral task
behavioral1
Sample
b9d0c7143f46c68108d7bf6f6172ffec_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b9d0c7143f46c68108d7bf6f6172ffec_JaffaCakes118
-
Size
350KB
-
MD5
b9d0c7143f46c68108d7bf6f6172ffec
-
SHA1
1308d14ab10e212c0bb7e4036218e7e55e9b3de1
-
SHA256
eb0984b46c22d2178ca79148680db2a79f7a6fe8772a90ff991075f3fb42db6d
-
SHA512
795442a37c5c743d9bd91353acf70b07ece8bd0e1b58d5e3b11e5d9e0618c33b7a3bb8ed215f504f0c77856ff6322e6512237826fcde4b580ea638ca6ebfc709
-
SSDEEP
6144:jIG+vg3HSSOCkhwXLg9W/J6Mt8VifcfK5l56Vf3hof73Qn22PoTs91gz/r+YN3:0bvg3kCe6foMt8ibbqf3uTguTy1+yS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9d0c7143f46c68108d7bf6f6172ffec_JaffaCakes118
Files
-
b9d0c7143f46c68108d7bf6f6172ffec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 4B - Virtual size: 688KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE