Behavioral task
behavioral1
Sample
eb1d29bc867ce3c8629a25b9be36bcde_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb1d29bc867ce3c8629a25b9be36bcde_JaffaCakes118
-
Size
1.3MB
-
MD5
eb1d29bc867ce3c8629a25b9be36bcde
-
SHA1
3f3a3397d2752cfe83cfba15d117f145ff60c2db
-
SHA256
c789e037c395742630ae289e3f9e5a82dbfe6948b264d649bd1249e698a97ce3
-
SHA512
09724a71bc229ecb63149f9202a65925c318b2e517e529f0f95834b6161dff3b67ba3bd168bb7c6da1bb01820f0b205e56894b22d06074bc834c52b664e6bb70
-
SSDEEP
24576:9QxLv2hNHQ5xy5RBebinlAjsdXjF9r4tgyhnzxI0dhqkHCc0qt91MI2GLvw/HEy:9WGjPBQilAQdXTIzFzq8qWCc0S1MI2G0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb1d29bc867ce3c8629a25b9be36bcde_JaffaCakes118
Files
-
eb1d29bc867ce3c8629a25b9be36bcde_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE