Behavioral task
behavioral1
Sample
e2975664edca4d5f34945e30f7e007e9_JaffaCakes118.exe
Resource
win7-20240319-en
General
-
Target
e2975664edca4d5f34945e30f7e007e9_JaffaCakes118
-
Size
335KB
-
MD5
e2975664edca4d5f34945e30f7e007e9
-
SHA1
b2438b896559bad5b75bee0892c63860d0a508e9
-
SHA256
195242381dedebf8c10dad2e7b24829b96f1094bb62e75d147592dc245de6d67
-
SHA512
89dce37ea62da8b9f44a6968f72ada974563e9ca9a640f87dcb1600c486279480e456333bf7eeec732ad2f65280b8c9192490569e9491786bf57b7ddb7263515
-
SSDEEP
6144:hGROo6W3MP+Yb5yCZdVmg4DeiiHolUVRIXMxr/vBEE4lrOZt4uV1q:h4Oo6W8WYb0CzVqDeiYsmbm9qthV8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2975664edca4d5f34945e30f7e007e9_JaffaCakes118
Files
-
e2975664edca4d5f34945e30f7e007e9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE