Behavioral task
behavioral1
Sample
eeb982598cd4a64febbf21a02859be74_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eeb982598cd4a64febbf21a02859be74_JaffaCakes118
-
Size
470KB
-
MD5
eeb982598cd4a64febbf21a02859be74
-
SHA1
ce455b42386f582cadd7d8f5e86bc564e8a4464c
-
SHA256
49e90153d1f91f77db74c89161aa1c18f09ff2387804addcb135ac805159afdf
-
SHA512
d814377fb3fe8a135683b36a8d4f758d61e0cfd5575243ee6974d2fbe2be5b1c5db0bd68f71988b283eb4df9d61e9fd03d26c9942c1e6ea89e1aae7d47ed4cfc
-
SSDEEP
6144:d4pVJx3Zq0OY1G2Siwm7rHubEvQMZ60EeVVTVK4ZnoIBpvYg/QqTW3bnNjv:6vJqQ42qJlMZPEoTVKIn33ji3bN7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeb982598cd4a64febbf21a02859be74_JaffaCakes118
Files
-
eeb982598cd4a64febbf21a02859be74_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE