Behavioral task
behavioral1
Sample
02ea027b085d7f8b5a74be24deef341c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
02ea027b085d7f8b5a74be24deef341c_JaffaCakes118
-
Size
118KB
-
MD5
02ea027b085d7f8b5a74be24deef341c
-
SHA1
bb700e883506b7cb1166307629e1f7d2b8844661
-
SHA256
814f9a4e06ec08bc646ada91aeec8989a606e572ac0a921b53ab12e3c77c3e6c
-
SHA512
4db0665adad04bc7521138ccab6239129e65a6a027b08f639c88096a43cc67eba42077a56594603f030253b8705302f184246045f9e5a320ac9f7c4aeb088a58
-
SSDEEP
3072:UKdDh96XaHHgO8kjVHgVLSlH2j1zRITbGozhtN:U6FAXaHssVHULSl2ubGott
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02ea027b085d7f8b5a74be24deef341c_JaffaCakes118
Files
-
02ea027b085d7f8b5a74be24deef341c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE