Behavioral task
behavioral1
Sample
2168fcadc235809786c7ef127e477e51_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
2168fcadc235809786c7ef127e477e51_JaffaCakes118
-
Size
784KB
-
MD5
2168fcadc235809786c7ef127e477e51
-
SHA1
afa5743272db6f01b7b18a51ab2a83d0c51bc79d
-
SHA256
2cde4ddc0c897cbf138a221c71b357284f6113212ebef148f5a37073752d100c
-
SHA512
a9eac4512aba154170259b1c80479295344f6d5c2b6fc9e1e7152d1f79eba5ae15fba95c931f1843dfe861aa0fd265ccd3b8d283f0791da538da5e1338aa1810
-
SSDEEP
24576:wPgnZDoq7i2f+a+DOLEOfymh1LOkGxDE:tnmmH7+DXlmvGx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2168fcadc235809786c7ef127e477e51_JaffaCakes118
Files
-
2168fcadc235809786c7ef127e477e51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE