Behavioral task
behavioral1
Sample
ce3be9f296e3a583ce9e34666bca6009_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ce3be9f296e3a583ce9e34666bca6009_JaffaCakes118
-
Size
6.4MB
-
MD5
ce3be9f296e3a583ce9e34666bca6009
-
SHA1
e0f459a125c5da790ece2e5f1a95fbf70a2fa739
-
SHA256
278f0ab4eff5e190f4024450eb2d8fd6b1d0289d3269ab418ce686df395719be
-
SHA512
fecf0a0e0a1475730bcee939c67fd02e7ec9125375d1756973bd94afd046885c14c57578754ab45135134a846ac944d86be21009f33d51a844fab37b29d84075
-
SSDEEP
98304:9KI9wafeKFRcTQ1B1/5iqPwB+IiZQoqtnNJl8zqp4CL2CktBFDbi:9K+waG6z1B1pIimoqtnNj4qp4GpcXDbi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3be9f296e3a583ce9e34666bca6009_JaffaCakes118
Files
-
ce3be9f296e3a583ce9e34666bca6009_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE