Behavioral task
behavioral1
Sample
d9c8fa697fd970308747644689ee1524_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d9c8fa697fd970308747644689ee1524_JaffaCakes118
-
Size
19.0MB
-
MD5
d9c8fa697fd970308747644689ee1524
-
SHA1
8348e3750ca6418b2c5ef34a3138a75257961fdc
-
SHA256
9a1f6f77798c9dc735f4af42ae8c88e763e5f8aead464da62c206656bac27345
-
SHA512
c68cafb02c984cf3779e2fa1aa690869ca5a7828af7fddd552c9f95e98220e22a1ba206d2a30c0131537140f7839d642b2c7cfafd9640ee331b06ce010b43569
-
SSDEEP
24576:gIlb42KT4fHwG9LpSCdPX0e1a0G1p82l/4eaw47du6pe1:gKLpSCdPXK1pDl/jawydLM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9c8fa697fd970308747644689ee1524_JaffaCakes118
Files
-
d9c8fa697fd970308747644689ee1524_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 14.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 867KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE