Behavioral task
behavioral1
Sample
eff62d661f048afc36ce3501105ef01a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eff62d661f048afc36ce3501105ef01a_JaffaCakes118
-
Size
1.0MB
-
MD5
eff62d661f048afc36ce3501105ef01a
-
SHA1
c6c6d4b9f9842be54bd602d027cc991af2cdf8d6
-
SHA256
1f658ec7aa36d01610788d5db966fbe5ec06b8f9b058e6a540ecebe648c8f75a
-
SHA512
3e05e1c79ec1683cb8d801193edd240b2ba5ff915ba1948d1b260b023cf1988804a1cb855df72a84a0f4cbbd5e1ea5c7100bc1e6b9269e916dd7bf7237cdcaf3
-
SSDEEP
24576:wHajWFkLXRDRXPORRnAFkLXRDQdU1F8+FkLXRDRXPORRnAFkLXRDn:wHmW4XjORRA4XYU0+4XjORRA4XN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eff62d661f048afc36ce3501105ef01a_JaffaCakes118
Files
-
eff62d661f048afc36ce3501105ef01a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE