Behavioral task
behavioral1
Sample
ea99a31f195d75b746eefb152975fd2a_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ea99a31f195d75b746eefb152975fd2a_JaffaCakes118
-
Size
365KB
-
MD5
ea99a31f195d75b746eefb152975fd2a
-
SHA1
b45cb7145be4cd8e9d440207481db6ff69ce6399
-
SHA256
ce7a4fde03511062e18803fd19af93b8df6fec2a2256a3eb9e6ddce9e0abb5ca
-
SHA512
30b7a01bb6978ec454431e1c6b70707a295a43c686594ac327a1613bfa8592bb3de929e6674ca47ae057b7ad73449bda86a1455eb0f9df2ab4b080f4ce0add6c
-
SSDEEP
6144:hGyG/jjaLwFjfmeCOzTiwWfaOKytqaCIkCud5mViltzLMPJm2iS7d:h3GaUFj+eCOzpWfa7yrCBkVoRLMRyS7d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea99a31f195d75b746eefb152975fd2a_JaffaCakes118
Files
-
ea99a31f195d75b746eefb152975fd2a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE