Behavioral task
behavioral1
Sample
e23683c048fc0fca37afe9ea041bf7b1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e23683c048fc0fca37afe9ea041bf7b1_JaffaCakes118
-
Size
9KB
-
MD5
e23683c048fc0fca37afe9ea041bf7b1
-
SHA1
1b55e55c86c2cfadde370ce75a92238085f390c2
-
SHA256
7b1edde7f4ee5473167de5b60811619cd8a455c6d1f1b76316913821eb546266
-
SHA512
4766ad8348a879de32b4482823cf29ec690a182f2639fc906d179dc6b22d92387e206acccd0d3d05b742e90f4af740843d194e6b9b777c01e9dbcc50c2c02511
-
SSDEEP
192:8KZDZNPTWCAieKOmFaNJhLkwcud2DH9VwGfct6SR:8K5Z5JSyaNJawcudoD7UJR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e23683c048fc0fca37afe9ea041bf7b1_JaffaCakes118
Files
-
e23683c048fc0fca37afe9ea041bf7b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE