Behavioral task
behavioral1
Sample
9e3dadc332c20793ad1f4406748b9c2f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
9e3dadc332c20793ad1f4406748b9c2f_JaffaCakes118
-
Size
784KB
-
MD5
9e3dadc332c20793ad1f4406748b9c2f
-
SHA1
8dd6196789c8d9092c4aebac2e99631b46df858c
-
SHA256
c2ce552b71d7dcd723ec999d090ef676f1859d8cd72fd8aad11aadc72489d79b
-
SHA512
37f05caea043de5f1bac3710494e617e187baaabc04bd4c3910a79cca3e59368d2aa52bf5cc676c8315d8fc9a00daa64d81bd0ed2d0b68b2479f1c5335bd23f2
-
SSDEEP
12288:b6GDSp/0fhKVjfr5nyYaySeHUljQYfJg19X7EgY8H/B0QEiH/E0Bgp:bxD08azVy3reHU9feLQgHH/B0G3+
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9e3dadc332c20793ad1f4406748b9c2f_JaffaCakes118
Files
-
9e3dadc332c20793ad1f4406748b9c2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE