Behavioral task
behavioral1
Sample
24cf414d3a5edc29722ab1bea37d8320_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
24cf414d3a5edc29722ab1bea37d8320_JaffaCakes118
-
Size
784KB
-
MD5
24cf414d3a5edc29722ab1bea37d8320
-
SHA1
e80988647caebbc108e548c75354fd74fbd7dc5b
-
SHA256
d1be36abd50c145f09a7f572c78b54d8468d9b584876960e7533d1a68dc7ccb1
-
SHA512
5da966eedc0fbe942d82817fe59c8dd7f5f293eaee967623de11847fcdd694ca0e1716b07d1d1c102ad361807d47828c3d8efecdecfe551e5f357d5348af43a7
-
SSDEEP
24576:07roPWVrEuBqOjj2ubyG9vj7WFvxzG5PN18U1yWDI/71wYO8b7x5:2ou17Niubp9vjSzgj1yWDI9x5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24cf414d3a5edc29722ab1bea37d8320_JaffaCakes118
Files
-
24cf414d3a5edc29722ab1bea37d8320_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE