Behavioral task
behavioral1
Sample
f9bab799aca0de898ce4a8cf39594e97_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f9bab799aca0de898ce4a8cf39594e97_JaffaCakes118
-
Size
449KB
-
MD5
f9bab799aca0de898ce4a8cf39594e97
-
SHA1
4cd93335cd8e743fff1b0ca75d90e66dc376de06
-
SHA256
5f758ad582f13b588e27c6a619d5e17c9ae4bbc7e8aa29fe3993d0b23b7454e5
-
SHA512
bd407d7fe76b858b7573e9d37e0fa5d8cc607a4e3a99c3b0c96d3d61be42a1a9a3374d6c1eeefcbab60d45e3de1af662ff94c936bdf464d278d6b22938f1c96a
-
SSDEEP
1536:phK0euNmX79d1eBayDhRCceN9Wu/NtXqjtSppUAO49L1tKUCSYb/I+xnRJxssdRN:TK0BNmr7Au/N6irHG/I+xnRJxFdhF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9bab799aca0de898ce4a8cf39594e97_JaffaCakes118
Files
-
f9bab799aca0de898ce4a8cf39594e97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE