Behavioral task
behavioral1
Sample
ea9aae31a39d42387b8ae242a256b23f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea9aae31a39d42387b8ae242a256b23f_JaffaCakes118
-
Size
464KB
-
MD5
ea9aae31a39d42387b8ae242a256b23f
-
SHA1
1353b18ba247dda9797c99811b29120e631dd827
-
SHA256
e64013ee8d11fe126aeae5fdde4e47cf539d8ba1cf1f210f0e48876f347ea36a
-
SHA512
4317aced3b4f41d52757c75e59a71a1310fbe30b1cdd35b52bf9091b59c389bc842d63192d2652468a61cc19e9fdd89ae6ecb7e37ce479749b5ee9945e1ab9ae
-
SSDEEP
6144:56J4L5/VacfbUblzrvRT+0RGQHlzWMxM8TYldRkQf5nHmKapLdAAEEe:11/VJbyn5T+0R9BM8EldRkmGtLdnE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9aae31a39d42387b8ae242a256b23f_JaffaCakes118
Files
-
ea9aae31a39d42387b8ae242a256b23f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE