Behavioral task
behavioral1
Sample
ea001a65f261b03c4b763253652b1b69_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea001a65f261b03c4b763253652b1b69_JaffaCakes118
-
Size
4.7MB
-
MD5
ea001a65f261b03c4b763253652b1b69
-
SHA1
6e2391decbbadb2e3ea7cc407d1171ea2f031b34
-
SHA256
e778fd08aba408df0a3a6f56a20edef7941d83b1b2aff1996de65b79b74592e2
-
SHA512
5990cb59e852ea6f82d4926a29cce5dec2a2b308370e80b3b9b89ac753ce29abb4c484d5a8072616214923a8246b05dd2ca74b19424bbcf679f4b3a0eace6d40
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHDt:yzDiNyiXfGDvX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea001a65f261b03c4b763253652b1b69_JaffaCakes118
Files
-
ea001a65f261b03c4b763253652b1b69_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE