Behavioral task
behavioral1
Sample
f2c11623e2aadba6289f4c33f6cb3a96_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f2c11623e2aadba6289f4c33f6cb3a96_JaffaCakes118
-
Size
2.9MB
-
MD5
f2c11623e2aadba6289f4c33f6cb3a96
-
SHA1
211bad9fbc66250111e4390a910acf974e821bb3
-
SHA256
a65ba33406895ee3312f83e2031e6ebad107ef99d9ee1580165b793d391e6e38
-
SHA512
06db85d34d71874b3a5a76c8f6e369ad075c6ee747a605217f630949ae16708a3f1bac29177a519eadc0def24510f1602e168ebb3f713a5721bf633b29e68d06
-
SSDEEP
49152:J8zCMDSg0Gg5Fo23hPOI6ljlzWD+jFExfzw677Bm9C0TLBRg7yvcTRCuqCaV/KCU:q2MDS1xno2ld6ljoaFwL6rg7EcRCbKCu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2c11623e2aadba6289f4c33f6cb3a96_JaffaCakes118
Files
-
f2c11623e2aadba6289f4c33f6cb3a96_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE