Behavioral task
behavioral1
Sample
e020bfa1df5c12d118820d1df8d3c408_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e020bfa1df5c12d118820d1df8d3c408_JaffaCakes118
-
Size
72KB
-
MD5
e020bfa1df5c12d118820d1df8d3c408
-
SHA1
9fbd40c1ac3603a40b3b4b13b23e21cdcdfdf779
-
SHA256
084b2153fdcd921713a0aaf23821f4702018139cf2eac92eba367a8f52326c8d
-
SHA512
a0b615e624030809c5886e5ab4d894647dab264c30cf019a64a60ceede9bff46ae18e8dde721979f6ccade0cec48ff77292f0266d54d066d7b56a589f5a16d75
-
SSDEEP
1536:Jeff+bU1bltTe+EBUGoh9803h5RhNp2vO3EaUod8HvVyses:JPf+EKjhtbNp2W3EtoWHvVy5s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e020bfa1df5c12d118820d1df8d3c408_JaffaCakes118
Files
-
e020bfa1df5c12d118820d1df8d3c408_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE