Behavioral task
behavioral1
Sample
ea0af372f7d42e7eb76425b239a3d962_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ea0af372f7d42e7eb76425b239a3d962_JaffaCakes118
-
Size
585KB
-
MD5
ea0af372f7d42e7eb76425b239a3d962
-
SHA1
10581b44f55e515b54e30bbbcf374463589b91b7
-
SHA256
9c1a10b8c3db882361469ceac19f03d5c23fe6e4b5ca1e990cd3861581f560c6
-
SHA512
27990e7677ec421bc4f09a60fcfcd110d72c48fe0284df49d9bc772524edd547fb2c34e69fe4b061bf089560640b0be8437bf3cb9abf8737c5654102529f366d
-
SSDEEP
6144:J85o6+YemRg3/6K06rChnAqTmVfv5CzEcIDsiZKlUrze7N+OgHwZJ+NP1WA8VdYO:J8Z+OQ66mf+waKYe7NAm3YE7d5H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0af372f7d42e7eb76425b239a3d962_JaffaCakes118
Files
-
ea0af372f7d42e7eb76425b239a3d962_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE