Behavioral task
behavioral1
Sample
eaaa74d75e6af41ed0ba73bd53738f17_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eaaa74d75e6af41ed0ba73bd53738f17_JaffaCakes118
-
Size
113KB
-
MD5
eaaa74d75e6af41ed0ba73bd53738f17
-
SHA1
a902823bd38d0a2db3a7bb9b78403b37949f12f3
-
SHA256
a861d72f32d320d6bf3120d58026b5b1481e006dc9e50b084a787d72ee4ccf1d
-
SHA512
828109242cfa11816a14bc7941b4b626b217cc62b2429609379889ad6e27815f6f0c31f4c558a2d58e39100e7114f5439af4d9efed16c0fa10ad961580370a84
-
SSDEEP
3072:VXjAPHLox83JbufVbHsDRxBXZVRDTpdkKaxdJ5wj:VTAfLox83JSfVbeBXTVlMd/K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaaa74d75e6af41ed0ba73bd53738f17_JaffaCakes118
Files
-
eaaa74d75e6af41ed0ba73bd53738f17_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE