Behavioral task
behavioral1
Sample
ea49de145004135496fe8252a39401b8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea49de145004135496fe8252a39401b8_JaffaCakes118
-
Size
1.5MB
-
MD5
ea49de145004135496fe8252a39401b8
-
SHA1
6c41c3d9d08d1cbead88b4344c549cd4021b7c6d
-
SHA256
4bd3005d76b5cd5cf5b47eb7971a90d7c2129d06aa5612bc2b2b265e8d69f787
-
SHA512
37ebad94d479f1d4f3480989716f4b501a0e6b7646253faf0d6bfcec6437e62b31fe0452ca0396fe6fa2d18c2307122912fa3ff10d66f4076ab30912bb14b547
-
SSDEEP
24576:61Wi1DzlSNZ31B5WtZtwO+LXu80kk8MbE36OogJ:61DZUFuPwt/0zcJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea49de145004135496fe8252a39401b8_JaffaCakes118
Files
-
ea49de145004135496fe8252a39401b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 633KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE