Behavioral task
behavioral1
Sample
e03d3a86356673d3c79b33d12a9454b0_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
e03d3a86356673d3c79b33d12a9454b0_JaffaCakes118
-
Size
341KB
-
MD5
e03d3a86356673d3c79b33d12a9454b0
-
SHA1
e7ddc2acd0e689087980f968cde8584b001d3820
-
SHA256
617e8d1d29689ce1769e5892374ddb6d5e124923797c5ae041b7d826bccf4b99
-
SHA512
4909d254303f454e623d7b92873a6fcf2a705509a6c740460f291259336ffd492255e9d25e7f718b3e3c9b5008308112d51545a427cf05cad0fc0e9ea1b0b87b
-
SSDEEP
3072:1YAfxX3lz4WR6IM4lGTMEe4ZhOG8JlTv0rpl:1Ygh1MbEkOGkzyp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03d3a86356673d3c79b33d12a9454b0_JaffaCakes118
Files
-
e03d3a86356673d3c79b33d12a9454b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE