Behavioral task
behavioral1
Sample
2625eee862dcea652319aff1fa56acc2_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
2625eee862dcea652319aff1fa56acc2_JaffaCakes118
-
Size
504KB
-
MD5
2625eee862dcea652319aff1fa56acc2
-
SHA1
638260665666fe616fa15d2ed5266b857b9b3daa
-
SHA256
2b4cee472f0ca3d6f0fa7e6c30f5035af6d4e487e54b87bd1db2f07c92eabcbe
-
SHA512
dfe87aed6c3edf8a79b3862506e0f58ff6b76778e040301144929fe0f368c8bc20ef98691d4d8dc5acf078e7cf395aa7aeb7c4b836a69d9abfbf220fc0ab7c46
-
SSDEEP
3072:/hyK0wFa85xWRCFvuwYXk66AU0KfAPOx5sWzeqTge:/hfFzaXk8U06Ao3zeqTge
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2625eee862dcea652319aff1fa56acc2_JaffaCakes118
Files
-
2625eee862dcea652319aff1fa56acc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE