Behavioral task
behavioral1
Sample
e250e4cc648df02a2a65de8c39b6a35e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e250e4cc648df02a2a65de8c39b6a35e_JaffaCakes118
-
Size
784KB
-
MD5
e250e4cc648df02a2a65de8c39b6a35e
-
SHA1
9c0470b553a981b0ea74fcfd79f703958145fc7a
-
SHA256
b0db013a6084e4549358c689320359d70ddbd0b101bc9336932bc689316212ff
-
SHA512
5d0d0f8121d26f8ed4a9bae953cc67f80a5315d3a6b11f73012e1412cd237f1e237a87307330b2a410cb04faa1e5fbef44a9566f9906999d592ea187e35674f3
-
SSDEEP
12288:JmPTkqfnIA6tLkXvepH149UxBKi4t+4DgUOCskEk6ZqIUqmnNRFcy2EJyYSaam9:JmPT8A4Lk/epHmUB6+SuDmnNRFczE8Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e250e4cc648df02a2a65de8c39b6a35e_JaffaCakes118
Files
-
e250e4cc648df02a2a65de8c39b6a35e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE