Behavioral task
behavioral1
Sample
ea07b8862edcd2b379c79686451c9e82_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea07b8862edcd2b379c79686451c9e82_JaffaCakes118
-
Size
179KB
-
MD5
ea07b8862edcd2b379c79686451c9e82
-
SHA1
5954d482a302a3d8befa067a943642a8bd74b80b
-
SHA256
2f575ddf07c3099c0d6cf59845388d8bb51eccc7636e316005a14cc35aeeb6e2
-
SHA512
8a6a7ca0252f23831ecc3bf5cf991c079ce60e4d1e7e1fbd3a22b5ce067723819836622d14660b78831d47b30ee563c517b2aee87083dbd54a6185a6726d28a7
-
SSDEEP
384:UCva4AoauIjyiodSzs8cnNj5RwtJ8DK3EGZP8WPXuxZkELQzsylsgaYGEqe:U67AoaQJWQNj5fs1ZP8WWrk/zstmGEq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea07b8862edcd2b379c79686451c9e82_JaffaCakes118
Files
-
ea07b8862edcd2b379c79686451c9e82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE