Behavioral task
behavioral1
Sample
eb466f7a97be1e7921ba20470d0ddd67_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb466f7a97be1e7921ba20470d0ddd67_JaffaCakes118
-
Size
101KB
-
MD5
eb466f7a97be1e7921ba20470d0ddd67
-
SHA1
13a6af48aa1070b71655932bd7be4f9db5d5b614
-
SHA256
f529b4b4f2d0779c9c0196d0f52d065b865282974b99f41d3c62282fbf24a79d
-
SHA512
7d8471aececf6286289f368a49e1d2865e33217c48fdeb6b2aa4930c26fa032f1d1d7a4a3b18615e6222a325776479d240a66bc4629baca035318272d116f5ad
-
SSDEEP
3072:k6NyBuGvqvEetcAWtMj/jQNjs/WDBTDlHoutk6zS:dyUcetcAWuwNjs/oBdoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb466f7a97be1e7921ba20470d0ddd67_JaffaCakes118
Files
-
eb466f7a97be1e7921ba20470d0ddd67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE