Behavioral task
behavioral1
Sample
eee4bf8f5cd72e34b7fc52c5b86c2792_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eee4bf8f5cd72e34b7fc52c5b86c2792_JaffaCakes118
-
Size
4.7MB
-
MD5
eee4bf8f5cd72e34b7fc52c5b86c2792
-
SHA1
3f64aa06baf7ed330cc500e82a2e600fe524280c
-
SHA256
052c950bb3bcffa24f920d6d4a31eb08981d5e4fcbcacb73ba0e99f31117f1bf
-
SHA512
cf963d25e607d9a17ea3ead878a92cd19787dea0d311b0e9d3ca5e3fcaaf1459abbccb7a57bf58fd63d0884fe712348525b31fdfb07be7010cfe114805b2650d
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHDf:yzDiNyiXfGDvF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee4bf8f5cd72e34b7fc52c5b86c2792_JaffaCakes118
Files
-
eee4bf8f5cd72e34b7fc52c5b86c2792_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE