Behavioral task
behavioral1
Sample
e9c3167bad804fa7ca58937921c6c913_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
e9c3167bad804fa7ca58937921c6c913_JaffaCakes118
-
Size
7KB
-
MD5
e9c3167bad804fa7ca58937921c6c913
-
SHA1
f335ffbf2ec797e142ec4fae9775028d43d18889
-
SHA256
e408915fda6f9be463ff1a7cca2ad1a3b9e28ab95cc6a1dc08931dcce2da26f4
-
SHA512
fbf879c015ba53121993466cfca8b8c027eb82537a9bc1c1845047c05a77f6e8c37fdcf70aeb23af72503b37325a7864cfd7c050800b95ec659713e96080d488
-
SSDEEP
96:VmhGfHKhkz8BNDSOPrZpNCHzon8bY+Np4KudBhZB8ZmN4G6Gl+Xl4ZCD1s24ZG1S:Vm0fHKhvMMZSEnaidomN/6W+14QafH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9c3167bad804fa7ca58937921c6c913_JaffaCakes118
Files
-
e9c3167bad804fa7ca58937921c6c913_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE