Behavioral task
behavioral1
Sample
eabc0711047f22cfa010d87015d43219_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eabc0711047f22cfa010d87015d43219_JaffaCakes118
-
Size
359KB
-
MD5
eabc0711047f22cfa010d87015d43219
-
SHA1
8a47818434d47250ad00695a7f8e4055e4f78da5
-
SHA256
717cf8a93db55515edee1c52c98d2242392efacad2066ddad6a86162e7f19839
-
SHA512
b62c760d32b1d964cc65dbcfa956c6be419be5131e1e7c725622bc8b92a0f2ecf4f31172d4f0ce9fd304557574774c98d297abd4da88d2f78a4ed9d27ab89a2c
-
SSDEEP
6144:ZgRyiIWQFpUv4/B+FrM144XlzKlUAzYYbuewX79GtPuB8PxwPh79i5s/CoS9iP6X:3iMCv45+uK4VKXknewr9GBY85wPTi5sa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eabc0711047f22cfa010d87015d43219_JaffaCakes118
Files
-
eabc0711047f22cfa010d87015d43219_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE