Behavioral task
behavioral1
Sample
c9144bc9c63716b3717b59fb7104dcea_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c9144bc9c63716b3717b59fb7104dcea_JaffaCakes118
-
Size
83KB
-
MD5
c9144bc9c63716b3717b59fb7104dcea
-
SHA1
0db4b447b1805cba0935b596a854dea7dff57b48
-
SHA256
996beeb5c2ea171eacaa05b0cf78e6d2e4fa9e3959c39133a5d38543aaf83fb5
-
SHA512
47b0bf2e332d8d2ae6a564afd115b15e2e2d278f2069824750bd85e6215d7f39abcc72632544018abd39883044ae9f01574dea2462748217d73b38ba3c6f46e3
-
SSDEEP
1536:nxLFxEBl6MAhgUbP9anZFPKwhf11y2pPcA4IipTRPc2bb40L5:n3er6MAhRbP9QZFPFXd5+IiHX4K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9144bc9c63716b3717b59fb7104dcea_JaffaCakes118
Files
-
c9144bc9c63716b3717b59fb7104dcea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE