Behavioral task
behavioral1
Sample
e1a15dca31b1368d56a609c4c97a57c4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e1a15dca31b1368d56a609c4c97a57c4_JaffaCakes118
-
Size
342KB
-
MD5
e1a15dca31b1368d56a609c4c97a57c4
-
SHA1
e0da85f2708e586453b689d91038b69e5fc3d8b6
-
SHA256
801629b52a594bb91125a40b9d0b4217d95fc1d7fba1cd4c16e5ab43c74ee81b
-
SHA512
181e7643d4883b6569ce176eed85c111dbb8efb04acdb20eefe19a759a8848359623e021aa9de223c4569c74bd80c36da90c0a3457544210f72d07be71c28e77
-
SSDEEP
6144:vRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4ygBnjykP:pqmpplpGoGL3etQoMiXM8gxf/Sj4ygBD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1a15dca31b1368d56a609c4c97a57c4_JaffaCakes118
Files
-
e1a15dca31b1368d56a609c4c97a57c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE