Behavioral task
behavioral1
Sample
e7861965b7938a6c0e7a50cfa0c0acf4_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e7861965b7938a6c0e7a50cfa0c0acf4_JaffaCakes118
-
Size
784KB
-
MD5
e7861965b7938a6c0e7a50cfa0c0acf4
-
SHA1
6b27757c5d9803faaf17d3a46a23dbaefc45cf16
-
SHA256
127b360fbd53a36ffc8bd5a6fbb8755725a32d487e63082bb7ff026178944c59
-
SHA512
24a6243187d50bd0e72416abbccb6f7d39f2d05cf6ec863bd6532f39918d52b6f55aa89a53f8f4525149e05d9ff1ef5d8112df16c37afa1d929a5a9a50cd3efd
-
SSDEEP
24576:RuPcZyjdb6mN6wJ8JDHMFd1INcnhMnywXst:RuUZypmEzJ4sFbzhMnywXst
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7861965b7938a6c0e7a50cfa0c0acf4_JaffaCakes118
Files
-
e7861965b7938a6c0e7a50cfa0c0acf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE