Behavioral task
behavioral1
Sample
e9e066da8b7f5cd8438f53b0979ad664_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e9e066da8b7f5cd8438f53b0979ad664_JaffaCakes118
-
Size
164KB
-
MD5
e9e066da8b7f5cd8438f53b0979ad664
-
SHA1
9fb050c5f7e449bb66dfde611a405b099db7850d
-
SHA256
31c03c7b9ff575807c231b01f248e4108c3e9e2e6367a30ee12da05b72bea986
-
SHA512
8bc1eeb93e14117b3d6445c88f123f7692697192e26fb75d16f52648877c6290170df23f03a01636e303901d1e3015b5a95dbd95abe18474f2a7fd3d573e8f25
-
SSDEEP
3072:aIM08AIjxZft5f04n6trKKsjP5Sv84uwM2KPVx9nWXcM/Lgqfs2Vk:1M0G/5HoGx9OKNxZWlgB22
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e066da8b7f5cd8438f53b0979ad664_JaffaCakes118
Files
-
e9e066da8b7f5cd8438f53b0979ad664_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE