Behavioral task
behavioral1
Sample
ea39d32546d1e652dbea3198aa40c8e7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea39d32546d1e652dbea3198aa40c8e7_JaffaCakes118
-
Size
382KB
-
MD5
ea39d32546d1e652dbea3198aa40c8e7
-
SHA1
12d79c026c67a08836f91eca7a79044a3ff9340d
-
SHA256
9137541b083959d43d94ea28945aab2169233afe1f603086e651fc762c7cdbbe
-
SHA512
969f02bc1160715cbb5429d227c0bc2dad7d60b62579f6eb6c230473fe086acd164662074718e9bc44cb9041ed7767c6496483f8aa79b68f985e670094d491e0
-
SSDEEP
6144:2Xitj/AB7WtTBcDh0Jj2CjnKY/PWqL5ef/CE+s0dMrNn9LlIVv5uGX:1tbMWtTJ7yqLK/N+s0d0xGX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea39d32546d1e652dbea3198aa40c8e7_JaffaCakes118
Files
-
ea39d32546d1e652dbea3198aa40c8e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE