Behavioral task
behavioral1
Sample
eed37b80b12dfeca68fd2507a426c0e1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eed37b80b12dfeca68fd2507a426c0e1_JaffaCakes118
-
Size
183KB
-
MD5
eed37b80b12dfeca68fd2507a426c0e1
-
SHA1
86112efe8b42d0be70e659c75817524442ecdc7e
-
SHA256
a99b79e6b0047b40d6f7e7376a7dae5bf82114648051e5c18c15954f091a4492
-
SHA512
544b354c1b524f7df21d7843ffac52e4d38f0da026b626a6ba123e0dad780b02f9d0e22afb7df19d7a4aa884bcfe161ace673ce1d6973a341e11b890a08ba264
-
SSDEEP
3072:3lcYQDteAUpUE72FKrOM3o9U163jD16fvoHrh:3lst0yM2gC4o9U1AjDsfv4h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eed37b80b12dfeca68fd2507a426c0e1_JaffaCakes118
Files
-
eed37b80b12dfeca68fd2507a426c0e1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE