Behavioral task
behavioral1
Sample
ea0d392ffc0de77aa9600eba8f7d427f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea0d392ffc0de77aa9600eba8f7d427f_JaffaCakes118
-
Size
22KB
-
MD5
ea0d392ffc0de77aa9600eba8f7d427f
-
SHA1
a40c9e5dda07854726b2ff3e7bbbfc737f80303d
-
SHA256
98f69f6f9d448eba4c1584cfa43a3c6ddcd720fa77e073f87f062d3d10c32bad
-
SHA512
96751972fc712e2b9cd5e48281daee6dd0a8d919584e11994dacee7e32fedee46515b04800ead1f7f40a472b9f2ecc1015cd6bc590459b0dfc1f9fb7ef9c8883
-
SSDEEP
384:QQkZbV8i+fIZFQyZpz0q7bYKkxRjK36ct14yvXbB75zE0WVaNJawcudoD7UBOv:TGcAPQIpz0Mb18Kdt14yvLhlExInbcuS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0d392ffc0de77aa9600eba8f7d427f_JaffaCakes118
Files
-
ea0d392ffc0de77aa9600eba8f7d427f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE