Behavioral task
behavioral1
Sample
e04e892f4d1e9e14dc4f3a31f65eb333_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e04e892f4d1e9e14dc4f3a31f65eb333_JaffaCakes118
-
Size
386KB
-
MD5
e04e892f4d1e9e14dc4f3a31f65eb333
-
SHA1
66b5df6d03db96a6826277ad0bf2e660b902934f
-
SHA256
11fadbf31316c17380416170e88ab6f751366661c58275fe507c460d42b97f06
-
SHA512
9dd6b432502fa3d83d761f8659ce3835a2db4131596bffd4eec4724ea8eb582268fad89e55d59e9be47c2ebf9a98599652d4b307fc55c9860f835cc2c28ab36c
-
SSDEEP
12288:q9xZ5yN3Cwaw//ikDju436I26h+OoS9Otg:q9vsky/7NKDm+1g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04e892f4d1e9e14dc4f3a31f65eb333_JaffaCakes118
Files
-
e04e892f4d1e9e14dc4f3a31f65eb333_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE