Behavioral task
behavioral1
Sample
e1f57c78b2987153fc38d2a93d562902_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e1f57c78b2987153fc38d2a93d562902_JaffaCakes118
-
Size
222KB
-
MD5
e1f57c78b2987153fc38d2a93d562902
-
SHA1
a4e3b0375b1e214be4ba7cedf8caf6c80aa64f06
-
SHA256
c2ea37cb65eb2abf61360e367799a38947919ec773074a8ff789fc8c666ca525
-
SHA512
0680c4fdc0498a09a76944fa6775245a51ba35ad71d3827b1f982b4cd4218cc5b2fb023fa16e8b6288ec03009e3d47a7ad922062016c07ba008ce5d3ed60423b
-
SSDEEP
6144:RBq0yda+VC+5s4yCjT5Se2IfkPY5DESQe/5nVfL18TI:XydaWs4ZdS/RSQeAI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1f57c78b2987153fc38d2a93d562902_JaffaCakes118
Files
-
e1f57c78b2987153fc38d2a93d562902_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE