Behavioral task
behavioral1
Sample
eaa2b568cbe0bf706a1d2fabc4bfbf6f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eaa2b568cbe0bf706a1d2fabc4bfbf6f_JaffaCakes118
-
Size
208KB
-
MD5
eaa2b568cbe0bf706a1d2fabc4bfbf6f
-
SHA1
65d2ab9159b060072d86a7bb230da91eebdfa1b9
-
SHA256
30e8943323c1cc05aa2d31ce842eff4495b1578f78ea7782cfb6474f8ad4deb6
-
SHA512
810df990f9b020cc570f45fa0aaaf1f85a5094b01b8dae290b169c0e81dff33ae174e9f82247ba317c98dcf184801fe075bd81be764879d3cc06fe7b93e2d630
-
SSDEEP
6144:4klbWYG7jPZJiPyhHn/T/fY914zrrsFBAKqKw:flbWYG7jaEL/ayrAAKqKw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaa2b568cbe0bf706a1d2fabc4bfbf6f_JaffaCakes118
Files
-
eaa2b568cbe0bf706a1d2fabc4bfbf6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d26a7db02099737f26267c1519ff9a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
msvbvm60
ord581
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE