Behavioral task
behavioral1
Sample
ebb7a441d5b770635cf5df9cd3d060fc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ebb7a441d5b770635cf5df9cd3d060fc_JaffaCakes118
-
Size
448KB
-
MD5
ebb7a441d5b770635cf5df9cd3d060fc
-
SHA1
02d2651fc31ea054ef003fca7696b0a40da20ceb
-
SHA256
fa60f56b8ff64e32ba27f99c8d04c4e4e77166652b119b8a29130d4c0e3ce882
-
SHA512
8c49c228e4a4720738d8e92a40762e9fcdc853f12a5e3bfdd3ecb2a22937ef5c3616edbcd3821c2588b8b0a4c0f2c590e93584895e224945de77aea551bfb8cf
-
SSDEEP
6144:TiJg1Yfh7LF6CsTpa7zkhaCIacbHVJ/LXfQIdpyqTVzdzcKlLyrvmezV:TiJgUZkM7oh9Iacb1xDptLdyKe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebb7a441d5b770635cf5df9cd3d060fc_JaffaCakes118
Files
-
ebb7a441d5b770635cf5df9cd3d060fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE