Behavioral task
behavioral1
Sample
ef2e74d0ee9130f43e638c416f02addd_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ef2e74d0ee9130f43e638c416f02addd_JaffaCakes118
-
Size
784KB
-
MD5
ef2e74d0ee9130f43e638c416f02addd
-
SHA1
16fcf2ea5a2994d0c02f64d8c7917d1de09b7199
-
SHA256
7b5dd029b6711eb99d600d77d24ffc11ae0ba515d0e7df51b6fde79bcec3c48e
-
SHA512
e695875af65468228cff02b04c58947ef3e891f8a167d87edfbefcab6a81bda0de3d256623f2db5c1a6eaf8c86edcb43bfde460d812c4101673c67d1acf3f865
-
SSDEEP
12288:whxjKp0q5ecje3MWq/1RMcWonnXc73+l/ZWdC99MW8Jbp:who0G7m7oe+P+CTN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2e74d0ee9130f43e638c416f02addd_JaffaCakes118
Files
-
ef2e74d0ee9130f43e638c416f02addd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE