Behavioral task
behavioral1
Sample
e0a5146d0b4b61ad8885a54ed4f8483f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e0a5146d0b4b61ad8885a54ed4f8483f_JaffaCakes118
-
Size
5.0MB
-
MD5
e0a5146d0b4b61ad8885a54ed4f8483f
-
SHA1
d29be2b7e70d97fa602984b1bc862d288a3440e8
-
SHA256
27b0c44a3a5dd88564c011c69aaec082137af371e6ba1c9b8439a225e83aa33c
-
SHA512
fcc163e480a1a6ca4c4db1bb6d5558c750614bb5e0126cbb887d58d85bb662ac2b11b4dc6effcc8e160d81dc49fd45ce0e4a231d0a44f4b3e7dd39fe38d6022a
-
SSDEEP
98304:1lEwLmJgKom3yxHd0ah0zcz226czxd3hyQoTuIK9ssuueFC:1S/ovh0zcz26zv3loTu79srrC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0a5146d0b4b61ad8885a54ed4f8483f_JaffaCakes118
Files
-
e0a5146d0b4b61ad8885a54ed4f8483f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 499KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE