Behavioral task
behavioral1
Sample
ead416620b41b8fad8147470ca90ba7c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ead416620b41b8fad8147470ca90ba7c_JaffaCakes118
-
Size
227KB
-
MD5
ead416620b41b8fad8147470ca90ba7c
-
SHA1
a92bcec48536041b7fee950960ab56a9d69242a0
-
SHA256
146db3479071a11053b669cb6f88f087fcc7c083525b4d5303a964cc8d08613e
-
SHA512
385de96f143f4372d2e4785efd062524ff58d14e7a756454ffbf15041561b4c9c331e79ab8385d3c91e180a507670f143dbd1cf241cf3c54dd0ee963cfa7909c
-
SSDEEP
3072:px9DDnY+e5dHXzLsBm/Jvc2J/nOo2FGS/rgm6DNDE8UCiWg:px9DzFM315ceJ2c/NQ8UCiW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead416620b41b8fad8147470ca90ba7c_JaffaCakes118
Files
-
ead416620b41b8fad8147470ca90ba7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE