Behavioral task
behavioral1
Sample
e0667a0905c418a85a214ff72ecb5694_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e0667a0905c418a85a214ff72ecb5694_JaffaCakes118
-
Size
3.3MB
-
MD5
e0667a0905c418a85a214ff72ecb5694
-
SHA1
5d9e03dbde6dfee00c14ec335ffc93a234553494
-
SHA256
fc44508c86c878641b9d4f07a3f4e9dc35ddb7cccb867c166f00d08cde1e20e1
-
SHA512
6bd28175099e8355830cd3413951055474e5f71b5a26c5442fc9d0f78ee767e804ed98ab0cedfcd2a1bbcad5bdf81ee285d41554b0305f96c42c6bbe92a16d75
-
SSDEEP
98304:quKGBR3Lh6xkxKIEjwp+u8MGJf9akmQqJqq5Hcg:hKGBFLh8UKIQfNMea9/L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0667a0905c418a85a214ff72ecb5694_JaffaCakes118
Files
-
e0667a0905c418a85a214ff72ecb5694_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 965KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ