Behavioral task
behavioral1
Sample
2115cb67b54f7b7b1e866f56b322e7a9_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
2115cb67b54f7b7b1e866f56b322e7a9_JaffaCakes118
-
Size
784KB
-
MD5
2115cb67b54f7b7b1e866f56b322e7a9
-
SHA1
92e441c913113fc5c9907a9d9f9378cb6de186ea
-
SHA256
6a42b29105428e071e83bb6f3e7633472c14982edbd8a5817a7690ae2bdba28a
-
SHA512
dd0b5b9ab7dec2da382e6c143b6943aa5fefb13061cc640c3e87a94acc0e5cf95ecf019d1c728eca1fbb257554ae6cc73becf3d3c73c331331f4ff1f7bb3e83e
-
SSDEEP
24576:NyhY7u/TQ3ozpu/U/4rtyV7wRHlY/E4ir:Nyhp/T4oFKjrtk7AcN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2115cb67b54f7b7b1e866f56b322e7a9_JaffaCakes118
Files
-
2115cb67b54f7b7b1e866f56b322e7a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE