Behavioral task
behavioral1
Sample
e03bb04f3d681f16b020d72ad0fc256a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e03bb04f3d681f16b020d72ad0fc256a_JaffaCakes118
-
Size
784KB
-
MD5
e03bb04f3d681f16b020d72ad0fc256a
-
SHA1
0322decb8d2c9d5c10f480e6b1bd985ab5609582
-
SHA256
d8fb782ff22d9a726066619388e4d0707951c3c68083469d9704246f3b0bc923
-
SHA512
11f52e29d508226ead2928d94d801cb214a0d526f58d01060b4e1b768e15e10c7fa180ad922ff30bd8d2148964632fc54856438ad5418f1b5ac2b3447d127921
-
SSDEEP
24576:GiXWN5zfTSGBHKbiHe/my5K1gtuAhPuQilAw3:GuWj7SGYbieh5rMAhmz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03bb04f3d681f16b020d72ad0fc256a_JaffaCakes118
Files
-
e03bb04f3d681f16b020d72ad0fc256a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE