Behavioral task
behavioral1
Sample
e1c23a17cdff39319bb8c2a50cc2554a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e1c23a17cdff39319bb8c2a50cc2554a_JaffaCakes118
-
Size
213KB
-
MD5
e1c23a17cdff39319bb8c2a50cc2554a
-
SHA1
69e68da8bbe1a866e3d5ee99f3e41ec2fa934119
-
SHA256
aa9d93dbbf718dc142af9e40040f35840b1e8e69aec12412f8238f287d78ee19
-
SHA512
ddfd06b32d8d5d057d887892ebe09be62d5f57fc67169b670f25d330318df7db36f5df8199569a721ed0b90455ee03b0e004deab88d65879829ed312b97027b2
-
SSDEEP
6144:4QEZaeqq9EkVtb2UrJM3gg2bdHgBbIJVTs:4NQQXb2Uq4HgR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1c23a17cdff39319bb8c2a50cc2554a_JaffaCakes118
Files
-
e1c23a17cdff39319bb8c2a50cc2554a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE