Behavioral task
behavioral1
Sample
2201b0a5d36cf79597bb42efc696c7d6_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
2201b0a5d36cf79597bb42efc696c7d6_JaffaCakes118
-
Size
784KB
-
MD5
2201b0a5d36cf79597bb42efc696c7d6
-
SHA1
3a4d75d7f97ea3e24ac3780562bfa8c96158463d
-
SHA256
c157569f844b8fd5cca6ec73acd16a81aca44f9fc8035e0eb7b0df7555ad4a45
-
SHA512
a8fbe9da146d8c2fef4ce6eb122d0d71fbb74813f880c00fae1275c142d7e638e618e9c2c0ea4078a7ae5b4b2f13b2cc43497c44fa24a54da6019ec11650f5a8
-
SSDEEP
12288:t0npC36LSls/PlvzHGRyv/O6fVsvFZktast7f5nQiIQ7on0v0+HozIaO0tTvOpKc:yExlYdLH0Y2FZnAnQI7on0MDUUTGsc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2201b0a5d36cf79597bb42efc696c7d6_JaffaCakes118
Files
-
2201b0a5d36cf79597bb42efc696c7d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE