Behavioral task
behavioral1
Sample
eac7769b73455eb76409cbe8a28a486f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
eac7769b73455eb76409cbe8a28a486f_JaffaCakes118
-
Size
209KB
-
MD5
eac7769b73455eb76409cbe8a28a486f
-
SHA1
beac41b99eb0ce832aa69c3adffda276c8e2e58a
-
SHA256
f01136d6d16d57a847d94fc903273845ff2a921e2c97a7bde1f5a15778f7e064
-
SHA512
83b8c7d05293fea6216d83cb7646d64f4907896ca7c2eb1debfe168e556158ede5e6db0f25c2b55fad549fac3b70d48258fddfe390b500217acba29e62fc4023
-
SSDEEP
3072:s5Prdweuuj4l5NiPxJm9eXoPO1aEvF0E0UJVQYzqjHS/KwqwWCVFWrYLx9BF12ir:swzWqjHq1qwWpr89BKir
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eac7769b73455eb76409cbe8a28a486f_JaffaCakes118
Files
-
eac7769b73455eb76409cbe8a28a486f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE