Behavioral task
behavioral1
Sample
ef5c31a807b13a27280e794bd02d293e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ef5c31a807b13a27280e794bd02d293e_JaffaCakes118
-
Size
29KB
-
MD5
ef5c31a807b13a27280e794bd02d293e
-
SHA1
55280525aebfab1d4e14853f9308c18f9a9673c1
-
SHA256
7edac3dac80eddba2368a8dd63a1c26b7885b54d3e84da6c16f1a35107e98f9b
-
SHA512
ef2f05c28e65cec70e2d497d71e0388399586020f8a228cd4c64f8e0be9bba75970132a4da3df374070f40537ab2e04a7e6009323cb1aba44d18acc1536fb2c4
-
SSDEEP
384:k9BTXsEwBn8nI0k7dtwUAbxAY2akOBUAzPYo5HjZVbh6OPgonnL+u8sxJhp0joeA:cTXve7dtw1GY2WTHfbh/x6u8YfpLj2cf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef5c31a807b13a27280e794bd02d293e_JaffaCakes118
Files
-
ef5c31a807b13a27280e794bd02d293e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE