Behavioral task
behavioral1
Sample
e18414d616991d48cd4cadff9410a3f7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e18414d616991d48cd4cadff9410a3f7_JaffaCakes118
-
Size
33KB
-
MD5
e18414d616991d48cd4cadff9410a3f7
-
SHA1
9b7f6231541db4853732dc14246c055c01386aba
-
SHA256
7d2073d33f02f8bdd6f13c5fc5e98ea9089cfbbe69c942973b21aa2052eb1eb7
-
SHA512
6d0095e12312ff440c7a12d3efffe42f4413a9243a376dd8aaefc2ef7dfe52dc9bb0e53e5ed60a6fe26f64b96a9be5dead4fba4ca596b8bf113ae059b6c02b65
-
SSDEEP
768:ZMev+Cfoy66DiOTZ0zWnTk+3q390Yuw1GJ7a0zJopQ:vboCVTZ0+Ts+hc0r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e18414d616991d48cd4cadff9410a3f7_JaffaCakes118
Files
-
e18414d616991d48cd4cadff9410a3f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE