Behavioral task
behavioral1
Sample
f9b486acba2048eceeecc193b9f3c6c4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f9b486acba2048eceeecc193b9f3c6c4_JaffaCakes118
-
Size
142KB
-
MD5
f9b486acba2048eceeecc193b9f3c6c4
-
SHA1
d1a92c34eb53cee278453d024e8e4ea17d1e5299
-
SHA256
8a3e6bbf07ff2c4bb6c6bfda2fe6f75820b4c9788f36cf92b57b9b9a4ce4016c
-
SHA512
a7ea7edd75846c42bfc11dfc426c449f6c6356dd545b7613bb64ee50c4e1d2c2f233cc0b2e901d0e2c201a37196dff16079f34678e3d01ee48887593b242a2ca
-
SSDEEP
3072:YJvGb/p9dFYkoaQ6yjmGfHf++IO/gmdTu+BDg/P+Bhi/exCeoutf7+d:YW/p3FxoeWmGMO/gmdPBDg/Sh8ex3oS2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9b486acba2048eceeecc193b9f3c6c4_JaffaCakes118
Files
-
f9b486acba2048eceeecc193b9f3c6c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 936KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE