Behavioral task
behavioral1
Sample
e1d10c179d721d2724d0adedf9cb3a28_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e1d10c179d721d2724d0adedf9cb3a28_JaffaCakes118
-
Size
57KB
-
MD5
e1d10c179d721d2724d0adedf9cb3a28
-
SHA1
d68905f98b7af27b5d7c80b11414370221396408
-
SHA256
46fc7c0dd72f33284fe44760e9addbd172068935a70c0e7478c6c12407a19c48
-
SHA512
c4395ccaee370f0f44a0729aba90db934433c7f75ee4ed8011f0cfe471f791289a6776d1fe45b056c2120488effb35fcd57cddc7c6f6631d9a33c5bd38063278
-
SSDEEP
768:dWARG45TC14N++C4ApevpJS6mIlH2y+vMmFCLsWWa0yliLzNdmxtNsddJfAwe/Wf:dWOGsTTN+feL7h27MMas/aFqAqryWs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d10c179d721d2724d0adedf9cb3a28_JaffaCakes118
Files
-
e1d10c179d721d2724d0adedf9cb3a28_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE