Behavioral task
behavioral1
Sample
ea1e92248dd691526ebf4a20550453b2_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ea1e92248dd691526ebf4a20550453b2_JaffaCakes118
-
Size
515KB
-
MD5
ea1e92248dd691526ebf4a20550453b2
-
SHA1
9ede7fb87fd1a247befa2dab63f1d271ab2f9ed3
-
SHA256
4ca5d630ebef3d4cd9e288bd417cda4dea1092383493acb03616621ea0c9cc45
-
SHA512
4f1b779e0be8e383347421e6c69cefedd74ec14d39acefb2462c1e3127785be3c79e7f9ae68e975e2c6ac2ee5f36ed3d9a3dcc22fcfb8745bdff9a67f68b476e
-
SSDEEP
6144:VRMaVXmMuBz1rmCtTOjWGpoibEYt41SUlWyJ8L8LSvOXa8S/URzNNbdngI6pDvVV:zpFuXQjLbN5UA9y+DlVDVE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1e92248dd691526ebf4a20550453b2_JaffaCakes118
Files
-
ea1e92248dd691526ebf4a20550453b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE