Behavioral task
behavioral1
Sample
eafcb16b16b5a273d4dd0f85cccdeea1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eafcb16b16b5a273d4dd0f85cccdeea1_JaffaCakes118
-
Size
481KB
-
MD5
eafcb16b16b5a273d4dd0f85cccdeea1
-
SHA1
e4c8f3f683d208aab00a52279a9d9930e2e2d07b
-
SHA256
0aa326fce1de69abfd779fc5746144b37b6f6956ed35613ff0e89d20e82d4687
-
SHA512
2e11ebbea25be061b83f47ef2327a671f53a3d469567159925ca1e91f503603a918ca010d7f917af1e29234ec83f9ec805a3b2b2e583117891934d6127b61680
-
SSDEEP
6144:6G77fhrnuhy8BlF74kHbD8/nJOXvYjDnqtZPYMhKqk:P7fhrkTB7bEJOXvAnYPYMhKF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eafcb16b16b5a273d4dd0f85cccdeea1_JaffaCakes118
Files
-
eafcb16b16b5a273d4dd0f85cccdeea1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE