Behavioral task
behavioral1
Sample
e0dbe80ff2ac2ff41b8a2c50bad09f6a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e0dbe80ff2ac2ff41b8a2c50bad09f6a_JaffaCakes118
-
Size
168KB
-
MD5
e0dbe80ff2ac2ff41b8a2c50bad09f6a
-
SHA1
ea48df0cfffa598d931033054dfab19d6a497e10
-
SHA256
c6385217146a7e99d3b3ca67647a5b89a4a171d590402023d60fd26c39703f9d
-
SHA512
271a347b534f74a5bed013fc7662a599ed9003db99027b638fbe4af78877e1b9c75d8b8c8b012998abff41dbb04a0406620ae2fea9409551f50a3eafba43f51e
-
SSDEEP
3072:XJ+kvKAi2+2lXjtvK+Wj9jH27hXYoiAro5nYLmVSxec85X9R:XJRvI2bxK+WjQ5VogkcAX9R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0dbe80ff2ac2ff41b8a2c50bad09f6a_JaffaCakes118
Files
-
e0dbe80ff2ac2ff41b8a2c50bad09f6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE