Behavioral task
behavioral1
Sample
ea73e0fd6281965f61ad58caa3325a2b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea73e0fd6281965f61ad58caa3325a2b_JaffaCakes118
-
Size
246KB
-
MD5
ea73e0fd6281965f61ad58caa3325a2b
-
SHA1
f6328bb750a604ae1921353ec8bbd108fcfabb55
-
SHA256
f1abde176e3567f08393cf799556c35327fd37cd74e459f66a7f47d489282e5d
-
SHA512
7825aeb2b3870d67250b2c076c8c877d21bb11c6efbdfd2c21e883e889bec4f8ba62c1584f81ab5343057a24b89010223e381e51c4f37a3eaeb91b90408a35f4
-
SSDEEP
6144:4tlnL+/edZdTFCiYgNXtnB063a+rr/9RYo0rRRPM:4H6G2wx/v3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea73e0fd6281965f61ad58caa3325a2b_JaffaCakes118
Files
-
ea73e0fd6281965f61ad58caa3325a2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE