Behavioral task
behavioral1
Sample
e2566cb39c9b1724d6695e6e9d77ed21_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e2566cb39c9b1724d6695e6e9d77ed21_JaffaCakes118
-
Size
2.3MB
-
MD5
e2566cb39c9b1724d6695e6e9d77ed21
-
SHA1
55471447b574700f0f00961ca545fd4950403cde
-
SHA256
98f4743ddb5dc8492dfabb52f546d10d4221237e5587b609d261b796828c4a2a
-
SHA512
b4bbc97dd2454b3421bb7e9d1d19fcdebcc24824f884636a75a9dc8a39d6e862c76a4f4387e7011e2b5f83c60bf4a7661a8327e87795b9663afccc1b55a01025
-
SSDEEP
49152:vyCVr6oetFSJ27mgrp3oNqFv+Bb8d+bcit8WIOk67E60i4+:Kc9J2qK3MqFwYvkxP7E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2566cb39c9b1724d6695e6e9d77ed21_JaffaCakes118
Files
-
e2566cb39c9b1724d6695e6e9d77ed21_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE