Behavioral task
behavioral1
Sample
eb64e979d24b1702bff72f020bc9efc4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb64e979d24b1702bff72f020bc9efc4_JaffaCakes118
-
Size
244KB
-
MD5
eb64e979d24b1702bff72f020bc9efc4
-
SHA1
d3b74eb3d3a1d53a760a8c9f3ac99a69515902a7
-
SHA256
4d448870cd00518f8a0f4795b8cd2243f942cc91c3aa66c59b8b2e9db4531962
-
SHA512
94933097d47829fec07963a9dc984b45c5f96263bea7be60196de95767242e9d165b521107b57c4e73eb253caaa03585716f7560268c4f710f939e81e6e5d5b4
-
SSDEEP
3072:hylvmrkzvB0gccH4UHxUUgdWKuyNTx/1FaF:hrrs14IxUU6WKnTxDaF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb64e979d24b1702bff72f020bc9efc4_JaffaCakes118
Files
-
eb64e979d24b1702bff72f020bc9efc4_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE