Behavioral task
behavioral1
Sample
eabc6b61f511f5160aec455599f44577_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eabc6b61f511f5160aec455599f44577_JaffaCakes118
-
Size
784KB
-
MD5
eabc6b61f511f5160aec455599f44577
-
SHA1
60c33d8ee99071a17003a805dd6ebddaeb6a351a
-
SHA256
9174c1664b2bca52096d2a8478104446546152288d31da6102430110dda8cc8e
-
SHA512
eefbd36faa77c1204fe1ef237c4daafbcf54eda520f124f2855757dd3e2f4dbd963bcc729b0f66637f47472625be8d99436a598867b35af1e02d85b68674a5a5
-
SSDEEP
24576:q4AplLs9J0IP3hYe7ICKRXihhXp38QLhRYZM68+Cj:q4YlWuIP3hYeIzXihX38QLhRYZMQ8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eabc6b61f511f5160aec455599f44577_JaffaCakes118
Files
-
eabc6b61f511f5160aec455599f44577_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE