Behavioral task
behavioral1
Sample
e233f2b6f121e9c68ff478dd63786ab9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e233f2b6f121e9c68ff478dd63786ab9_JaffaCakes118
-
Size
2.3MB
-
MD5
e233f2b6f121e9c68ff478dd63786ab9
-
SHA1
ec0825f2a0f701ced314ef3cd027172bf978b814
-
SHA256
c897b6a2dea475b7a992a72d182f352c4eef60a86cc886fd1b53c6d94f3fe8d6
-
SHA512
0419c579819969d313d96a59530f00e4044f49e5b9ffbcc82610624d984f5f5a63248cc9eb3eabf7670a5c50d5a24abf9ca1fc648d9392ec74b8225b787009a7
-
SSDEEP
49152:+3HBbp9iRX7mAJdmf6ODFIR9KZ27pGQj6/K5lgpA3X3M1CBQE:KH/9iYAJFOxI/KGsS6mXcGQE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e233f2b6f121e9c68ff478dd63786ab9_JaffaCakes118
Files
-
e233f2b6f121e9c68ff478dd63786ab9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE