Behavioral task
behavioral1
Sample
e1b286f38d1f5aaaf86e83fa40da337b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e1b286f38d1f5aaaf86e83fa40da337b_JaffaCakes118
-
Size
317KB
-
MD5
e1b286f38d1f5aaaf86e83fa40da337b
-
SHA1
afd3ee1e518f8b44bd372bc2cdaea726e8068138
-
SHA256
20128bb1c43b1d0e8d248c43a3d6dc63af61c9a46f6d4d7d2eb7758f600a0616
-
SHA512
7067517fb913ea4c7875094ee37f4a2f1f8e88f2714dbd3b154dbbec6368e2bea31722d9983d0f809216194b3e3035bfb73857d9a659f27f512926bebaa9ee6f
-
SSDEEP
6144:0hb0gzg5sL/qEmt7RzD5bAMkUKgiu5Gn7FSHhD3yeqbJ60cm8DBf7DjwoSe:9hG31bJ60cff8oSe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b286f38d1f5aaaf86e83fa40da337b_JaffaCakes118
Files
-
e1b286f38d1f5aaaf86e83fa40da337b_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE