Behavioral task
behavioral1
Sample
21e95268651dea20f511ac615873c743_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
21e95268651dea20f511ac615873c743_JaffaCakes118
-
Size
784KB
-
MD5
21e95268651dea20f511ac615873c743
-
SHA1
b6088538fa3f1837199630f2184a6a679a22d839
-
SHA256
31ff5d2c90cfd096e52ce473a8bf2553a2c5d2a09778cc9f7f5868e181f5664a
-
SHA512
1899621b0095b7857122476bd779a07f1dfb9ce0f1e9256df1ed65e458af9bc1923179e977919ffd8a6d0e0fcbc2fef8657063f807c271916cfc131d87099b69
-
SSDEEP
24576:GgerfeZUILVwOE+eT5OpDS4jFqeUnk85Sskka+:Ver2ZRQA1zqeUkYg+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e95268651dea20f511ac615873c743_JaffaCakes118
Files
-
21e95268651dea20f511ac615873c743_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE