Behavioral task
behavioral1
Sample
eed82875baadd0e1bd28889160a9af5e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
eed82875baadd0e1bd28889160a9af5e_JaffaCakes118
-
Size
1.2MB
-
MD5
eed82875baadd0e1bd28889160a9af5e
-
SHA1
41daf75e01ca414f9611a3ea6419f77f31baac95
-
SHA256
fff1f38dcfb2282e264b86acde617248f5b90dcb77a090a622ec02add6794916
-
SHA512
17289a4c6d13c3a67972616560da8812b92564dbafbdae8a86e5c144e5b1107725e27fefc08d9e0142d7ebb83bf5760fb3cdf884af0f6da377ab01976d584aac
-
SSDEEP
24576:MqVUSLQT07LNLNwnQaVhxoBu6y4Uq5T/dswzFa5/8PRmSGSvZD:MqVUSLQT07LNLNwnQaVhxoBu6y4Uq5rx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eed82875baadd0e1bd28889160a9af5e_JaffaCakes118
Files
-
eed82875baadd0e1bd28889160a9af5e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE