Behavioral task
behavioral1
Sample
ea11a98f67bd2b09d35a8fac1957cd4a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ea11a98f67bd2b09d35a8fac1957cd4a_JaffaCakes118
-
Size
356KB
-
MD5
ea11a98f67bd2b09d35a8fac1957cd4a
-
SHA1
c8c154da89676422acf90fe19164e1c121a81b68
-
SHA256
ad16602fbd77ccf11878bd8a669fa402ba3b74778b816c022835997340d17b62
-
SHA512
b247899da5843218e8b52b33bf56cfb8965e872b8c5c3c0b89fa7e1182b5d5b848f7577710fa9cbbdba5e20e18e5959f32954bc844dcf6cd9e3925f06cd15137
-
SSDEEP
3072:OrMyBpL/+8SbNNZ1uUAjpL/7NMcpL/7ZI/pL/7HM8pL/7j+2BPX4:OrME/ZQfLuJ/d/6/P/1a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea11a98f67bd2b09d35a8fac1957cd4a_JaffaCakes118
Files
-
ea11a98f67bd2b09d35a8fac1957cd4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE