Behavioral task
behavioral1
Sample
e0686e42b922aa6bdd728e2491f367f8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e0686e42b922aa6bdd728e2491f367f8_JaffaCakes118
-
Size
563KB
-
MD5
e0686e42b922aa6bdd728e2491f367f8
-
SHA1
081ddad65a3cb3ec4aaa7f59028c763232f5b919
-
SHA256
d38d80b1cc98f28c02cd3cbdb3e40449fa8b0cd5955970064a0880846f5f4203
-
SHA512
5c78abe9a1c888ebe582f7741f3eca0db4d8a167056324642d3e611be736eeac1c83bb46ebaad5cc0327ddf4d6074c353b381715646b9bad61841e65c4986cbf
-
SSDEEP
6144:tmza4X/ZRUWhMq/O1gXATGUIW7sEtPrb3oUA8tYUYj1OAmDFQWt0tMZOJdmQKnKk:AaI/ZSWhMq/vsftf3oP1+FmMZ1QK/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0686e42b922aa6bdd728e2491f367f8_JaffaCakes118
Files
-
e0686e42b922aa6bdd728e2491f367f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE