Behavioral task
behavioral1
Sample
ea5072f8c585e35909b40d6ef7b10cf4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ea5072f8c585e35909b40d6ef7b10cf4_JaffaCakes118
-
Size
730KB
-
MD5
ea5072f8c585e35909b40d6ef7b10cf4
-
SHA1
7202cc9155e49da016f755b05e0182bf377ccbd4
-
SHA256
6cf68c813338a4b193325d93c0e88a172c34700fce62126f0ea77eb4295fdddd
-
SHA512
c7914ecb39f4b731525bfe8672ee5062ef6b70aa4b65b16b35c61dacfa850c1777ae882f05656e48db180906516d48b06d07cc7e0e915d81decdc50ae7a577bb
-
SSDEEP
12288:rbzvF412Nc63gs370N0MP+ToLpMCvV+4pfLn8+JdV9yvJrMDBI:rb54kjE0MWToLp1LpUJrMDBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea5072f8c585e35909b40d6ef7b10cf4_JaffaCakes118
Files
-
ea5072f8c585e35909b40d6ef7b10cf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 379KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE