Behavioral task
behavioral1
Sample
e8f08ea3c3a857df09a193931b0ea513_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
e8f08ea3c3a857df09a193931b0ea513_JaffaCakes118
-
Size
784KB
-
MD5
e8f08ea3c3a857df09a193931b0ea513
-
SHA1
a9be2ba92880dd809802070b3283ad455d38be15
-
SHA256
54d2f2864e8912f9ad0919d4a9378a26836c9403fb622c9dbd89b33ba67eb3eb
-
SHA512
d9b755f3b0ad2402b909cb96831bea53b05db84bbffd0df38f5b966ea07be32c292a4b3d37d7a516112ee8e2460fcc94a63de6938e9b8eab138ce20d535fb9ba
-
SSDEEP
12288:EZlgYjk//iOunOtMTO4N53S6UbEGPRMaAuv4Vqg//UOMV6/ooIb1SoTuEng+AbE0:Ew+kdo59SZPGuvUF/o3TuM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8f08ea3c3a857df09a193931b0ea513_JaffaCakes118
Files
-
e8f08ea3c3a857df09a193931b0ea513_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE