Behavioral task
behavioral1
Sample
eb796b6fdefd3bed386ef44f84b5bf39_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb796b6fdefd3bed386ef44f84b5bf39_JaffaCakes118
-
Size
147KB
-
MD5
eb796b6fdefd3bed386ef44f84b5bf39
-
SHA1
98e029a5c4dba507e9d0ddb033c731eb40da3b64
-
SHA256
91587c7146bb4717d2e32df899cf52a7778b7f1c84bbd3f8650948a8b5ac53f5
-
SHA512
be8d8fb9539244db2a50a64732a6d1adc323af045ddc3a7ef46c53c4fab7c22c959cc63ac1eb307bf09bc14328d85a79925e13f3759f1722ebb458eb63911d6e
-
SSDEEP
3072:tUSpKe4MSJ07gZ/mAgE4ZWgEU69shB03qYGkkDII3c/SKKJpZXyTQoqBWoutEC:dV7SBfgEpU6CWGkIs/MpZBBWoSV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb796b6fdefd3bed386ef44f84b5bf39_JaffaCakes118
Files
-
eb796b6fdefd3bed386ef44f84b5bf39_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE