Behavioral task
behavioral1
Sample
eb9f765a1135e957e8f55e415e2d5d3e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb9f765a1135e957e8f55e415e2d5d3e_JaffaCakes118
-
Size
784KB
-
MD5
eb9f765a1135e957e8f55e415e2d5d3e
-
SHA1
1c9a3f60315121400e4d0b440d3a13cdc6e17db4
-
SHA256
558aadb88df15239f63609fe48eb6e4a93e772bb8d8cee3a6f1f00989254614a
-
SHA512
18fc345fa690d03eb793dc5a10987109e053f7ba662d61a8b2738b9af1148992ce81f1e08a769d9aa3c424c5ba6adac4193b24ea2c62454842e16fb372d23438
-
SSDEEP
24576:82vEYcfO3SZIhcETtUaIoP3A4MpTd0XD+5FlFVOX:82vEH2COGEpUaJojHGSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9f765a1135e957e8f55e415e2d5d3e_JaffaCakes118
Files
-
eb9f765a1135e957e8f55e415e2d5d3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE