Behavioral task
behavioral1
Sample
ef1ff02e590e3a7614abfab8ccb3c073_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ef1ff02e590e3a7614abfab8ccb3c073_JaffaCakes118
-
Size
248KB
-
MD5
ef1ff02e590e3a7614abfab8ccb3c073
-
SHA1
484baa6eb7c85e90a8f49e4bf27ecb39fc515882
-
SHA256
4982ea902d8318818aa330c45fcf39c73e83e14bd8cd5df2b5a82937e5948de3
-
SHA512
f8cc5a0bb2fb4eefdb4d11af3448b4a1110d0ecd528a7962fbc2e545c6008317661b46e1ca4b5a016a1907627daa8640f4778f72d956c9377254aa360bcec8ad
-
SSDEEP
6144:6fQ+pAAe37K7ofwvrO7XCMRsdIdFbxLxgPRiUI0ajRbi:6f/A92GV2IdtRmPsUI0ajRe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef1ff02e590e3a7614abfab8ccb3c073_JaffaCakes118
Files
-
ef1ff02e590e3a7614abfab8ccb3c073_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE