Behavioral task
behavioral1
Sample
eee75c85c83a4697172efbc586b4462e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eee75c85c83a4697172efbc586b4462e_JaffaCakes118
-
Size
10KB
-
MD5
eee75c85c83a4697172efbc586b4462e
-
SHA1
f10ef54992cad0f192df6a16afb8f0eee028c319
-
SHA256
a6eff5b1d9c6c8cd3bcd013178ea2153c40b2e910945d9fa324c66ef5f129654
-
SHA512
30b9565a821f6da19ae6bb1db877fed5643dde952569327df5a8b1f6ecca50f745dc9611672b56bf573fc250905ff6f3adf0919f845b8e2d72d837a912e3b754
-
SSDEEP
192:lM0e4aoEDSYV5xkDFBNA6kEGPIQI1r72J6NvE1NBN/mbBAC8htYhxek:lMF4aHnfxkDFxkjPI5F6JevEr/myCIY9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee75c85c83a4697172efbc586b4462e_JaffaCakes118
Files
-
eee75c85c83a4697172efbc586b4462e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.%$ Size: 31B - Virtual size: 31B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE