Behavioral task
behavioral1
Sample
d9fa4f96cce7919b06038e95da3b83c5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d9fa4f96cce7919b06038e95da3b83c5_JaffaCakes118
-
Size
559KB
-
MD5
d9fa4f96cce7919b06038e95da3b83c5
-
SHA1
ee898d2e3b6197dda1ff17836a141d7a98f0949f
-
SHA256
9d67b32ae34c45a2636b6a581652c18700d9975f357425401d5d8977f5f7d670
-
SHA512
ae630995f864781185fc8a8fc80a4afca9152a3a596b6b68c6d138a888b9bf001b80b86a4a67f21558d54845ce1b80fa03fcdbc64f73339e2df7f421dbe8ac0f
-
SSDEEP
6144:t1uT9R46lnfzjUT43TptFKvctOpbXi5hjBtW8/VYZZ8J8qFfXDX:GT9q6h/UTCTJuSiXizjBg8OsVlL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9fa4f96cce7919b06038e95da3b83c5_JaffaCakes118
Files
-
d9fa4f96cce7919b06038e95da3b83c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 936KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE