Behavioral task
behavioral1
Sample
f9a491a29d029f3b78c33c05323b2223_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f9a491a29d029f3b78c33c05323b2223_JaffaCakes118
-
Size
207KB
-
MD5
f9a491a29d029f3b78c33c05323b2223
-
SHA1
11391ebae8c6cd2fec3b7e0092e7feeea2f24e5b
-
SHA256
731d9a254e8b905f2b7584f45b729ea352b5d498fd39faa0988f66b27fb3718a
-
SHA512
204811f364c9ae0535a195fc9b54927e5094b453f51437756fb51cdad3d5a0844b5aec5467404c3fd3c84d189c5ccbede7671e0154b748325fac09f99b34dba3
-
SSDEEP
768:65X1ai+ympyeHJcUqWkBFcRuUhSD58v0BeBhT8gq23gsCq23gsYq23gsn:G1MpyeHMWkGb2je4aAOT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a491a29d029f3b78c33c05323b2223_JaffaCakes118
Files
-
f9a491a29d029f3b78c33c05323b2223_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE