Behavioral task
behavioral1
Sample
ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118
-
Size
10KB
-
MD5
ebcae4d26e09b647bbd0bc4e0e3b56a1
-
SHA1
367a36eb4d3196477477108d129a33f33c0af914
-
SHA256
35a40df18208e87c42d63b3ae8b45839529b48903c7cf843a2ae42fdaa7e6bd6
-
SHA512
57a66b66f1e2a28b7bfd1c24b58da5ef6bd773c8e7a3f9461490b31170cfff9308564cfc6c04eb9a0f693a96bb37e8d702fe3e7f503f23b9eeb5e8cdad38462f
-
SSDEEP
192:fKMb6laJXPwmBh3koHjjsKA4tihs0eCbqZn7oJwOJ684zjMvs2UZuE0:C0xPxBFjHA4guZn7tb8H7f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118
Files
-
ebcae4d26e09b647bbd0bc4e0e3b56a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE