Behavioral task
behavioral1
Sample
e11f6dd440bd110eb8cb5bcb63a58f92_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e11f6dd440bd110eb8cb5bcb63a58f92_JaffaCakes118
-
Size
342KB
-
MD5
e11f6dd440bd110eb8cb5bcb63a58f92
-
SHA1
b49c1647e97465988699a0f001c8542e6467ba9e
-
SHA256
2ca2e1aaf1c4df0628517068fab22e529849fbc1e699aa1056000230600a234a
-
SHA512
1e13abe658d0fc00a829954f09b6ddc5c3d3ed504a380b923221a1199fe3fc247cf835420350f5f887be128879ce0c054c6472c941c221d8aec6ca5c04a457aa
-
SSDEEP
3072:JkP4fRfZ/6YbtWbEip92LleB3CfPnZ16fUktZkRMNdOGg370xT+:JxZ12UrMvIt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e11f6dd440bd110eb8cb5bcb63a58f92_JaffaCakes118
Files
-
e11f6dd440bd110eb8cb5bcb63a58f92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE