Behavioral task
behavioral1
Sample
2756ddfe7b1ccdc17546faaf831b890b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2756ddfe7b1ccdc17546faaf831b890b_JaffaCakes118
-
Size
1.1MB
-
MD5
2756ddfe7b1ccdc17546faaf831b890b
-
SHA1
defec5acbeffaa57b2d5b54e14555848ecb71fea
-
SHA256
0c10f05c540ea9d669a9f08163c47e60596115cdfd62e3cdb51a76c7961201bc
-
SHA512
631f1625243d43c7db9c4136fe730208ea313f819ee0a658142c266a8758d2f69550898aca1b19f4d60466c0a7532be5fe064f6cbb4899afd8e24831e329c5b2
-
SSDEEP
1536:APA+WLx+eu/pEhrUBZjnY2GJBofIxGDpykBZpiGnouy8:AI+mgC2p2ifINp2out
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2756ddfe7b1ccdc17546faaf831b890b_JaffaCakes118
Files
-
2756ddfe7b1ccdc17546faaf831b890b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE