Behavioral task
behavioral1
Sample
c9272c28d0cfd8f915a64625550cde44_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c9272c28d0cfd8f915a64625550cde44_JaffaCakes118
-
Size
154KB
-
MD5
c9272c28d0cfd8f915a64625550cde44
-
SHA1
873c41313ec4b538282668ee6d4d50001b080722
-
SHA256
6c3cdd9083c64eb622581e0b342d34598d7a22b8e8a1225ef03f65d103dbe96d
-
SHA512
4d9313e4000fba3085d13b87ed4287a12316c5bcb66c66e361f31b1741df4bb2dd02751a5a7b8dd81f20bb40bacebd5daf44b6bd73d7d1f537a6d430729f4f03
-
SSDEEP
1536:/4x4sShDieYCgAp9WsqPszGBL0xX1zYYb4WeM34VkdCU1MPfLuA+13RiIKn+3Txf:Q6PhD3gCP41PSlKn+LC0HWJv0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9272c28d0cfd8f915a64625550cde44_JaffaCakes118
Files
-
c9272c28d0cfd8f915a64625550cde44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE