Behavioral task
behavioral1
Sample
eed940acb4b2c5129319e62a7ccc6cb2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eed940acb4b2c5129319e62a7ccc6cb2_JaffaCakes118
-
Size
29KB
-
MD5
eed940acb4b2c5129319e62a7ccc6cb2
-
SHA1
e48ca38fdf668337396bbce7929158d22810cabc
-
SHA256
64e36f5d320ee64d5aa6cf4a12b9e5d255a28c0a0a276904ed0b8edf32a84a42
-
SHA512
45fbed4280b2f1e6760a4ac0c130411b2234669b6355e173dd57b6ae40381e51ebfab50daf11ec1ef5bbb88ca854c345bc88b5174d9f38c44b60a9c83b647ed6
-
SSDEEP
768:p+tyZIqOnd3/8VjSwP2TTfgQl9GuKxCmHsMtKmCYPFO:p+tTqOd3/8AD7R9xKxCmBt8+FO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eed940acb4b2c5129319e62a7ccc6cb2_JaffaCakes118
Files
-
eed940acb4b2c5129319e62a7ccc6cb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE