Behavioral task
behavioral1
Sample
eae4e9db88bf9605eab5e62be8ab4678_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eae4e9db88bf9605eab5e62be8ab4678_JaffaCakes118
-
Size
473KB
-
MD5
eae4e9db88bf9605eab5e62be8ab4678
-
SHA1
fc4821423c4b73208a04e09e2b8e4e66e82c062f
-
SHA256
cf0b2e20943ba7e2ed00d0b86261bc526d6a8eab47fee7646f863771b5c509fe
-
SHA512
eb661f035e5db6d178160def1fdcc2ec47e428613c5705d7ceb3e9ffd12a92ca1bcc90da2d7a76304d7a3e6980665d7b0ded7a2b20db270c640716521be1729a
-
SSDEEP
6144:uNidUOt1ZqF0dQsQno/7jq/JDgkZRxQ6M9kObtTFnC4ICUQRpT28VBrXbznSVDlb:jgF01TMkRVC5C7X28vb2V5YU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eae4e9db88bf9605eab5e62be8ab4678_JaffaCakes118
Files
-
eae4e9db88bf9605eab5e62be8ab4678_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 872KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 446KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE