Behavioral task
behavioral1
Sample
ea8fed7bc859ed027e33caf2f2887ae1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea8fed7bc859ed027e33caf2f2887ae1_JaffaCakes118
-
Size
327KB
-
MD5
ea8fed7bc859ed027e33caf2f2887ae1
-
SHA1
8c8d3b2aaa90ef4b4731c2b15aaff281c74bbee3
-
SHA256
c894f85d0eac6d24aaa60e88bd10df364d893c6a2bd33677944262d285ad6c61
-
SHA512
689960dcae044d1ca78f258bed9a438c8f62aeaf2602c421a4ccaf5bd7f6f27d35a85e55e6b06fbd08cd3a1255d801da698f6c14dfb19fa6c72a5cbe6a191eef
-
SSDEEP
6144:ZNEFyoj9DXY7r6kHJwie1deZaYIRi+XD4d1BsuilFbADub8P5WArf2Cbcxm:ZNEFymXY7ZDe1ka1M+Ej+lFEY8H+C4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea8fed7bc859ed027e33caf2f2887ae1_JaffaCakes118
Files
-
ea8fed7bc859ed027e33caf2f2887ae1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE