Behavioral task
behavioral1
Sample
e9d7d531aefbe545b2ed757b6123ed7a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e9d7d531aefbe545b2ed757b6123ed7a_JaffaCakes118
-
Size
604KB
-
MD5
e9d7d531aefbe545b2ed757b6123ed7a
-
SHA1
72d56bdcc327537338261c9b5d0c4fd171be81ae
-
SHA256
d20f466af7122f5b18f83175486f53bd6a8986c3b58cf9e1f01905702c8b0259
-
SHA512
13d584e285363b8a4290effd297012574645e85ee8bf14e9c00f63890f19bb5ca229f0c939a24c14c616c184f31e573dae51104408c59e2c76e3473e5f298f76
-
SSDEEP
6144:YfGGBGgkDWNTTHKpedc2+WzddS1XAMi/vS7Uug:ABG8VHKcdc27zddS1XAMiq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9d7d531aefbe545b2ed757b6123ed7a_JaffaCakes118
Files
-
e9d7d531aefbe545b2ed757b6123ed7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE