Behavioral task
behavioral1
Sample
e9d7b300402dbd63d8918aa24230148e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e9d7b300402dbd63d8918aa24230148e_JaffaCakes118
-
Size
4.7MB
-
MD5
e9d7b300402dbd63d8918aa24230148e
-
SHA1
9491ba47f2208a5718fa4d585f8b85462902a6c7
-
SHA256
a8ca6ca8c026460189569379e6a6602ef4522d8e61e55a980af562c16755052f
-
SHA512
9f76db4fb079debab68657c2f49b462a725cb8ef184097470a251212cbb3e2ec20eacbe4316f6c2f5bd72961f0f359c201d3023f61516c42b9d80d1d34dc0bdb
-
SSDEEP
98304:0cFbbpwyxiLFWyOd0wrxiFPwFhTDG/5z6pteSIfkTMtviwAIemF8rDBF2nf:TblxiLM/d0wrcwF9DG/cKSIfkToqr+e8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9d7b300402dbd63d8918aa24230148e_JaffaCakes118
Files
-
e9d7b300402dbd63d8918aa24230148e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 502KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE