Behavioral task
behavioral1
Sample
2e32c9d6cc4406072baa48df7304434e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
2e32c9d6cc4406072baa48df7304434e_JaffaCakes118
-
Size
784KB
-
MD5
2e32c9d6cc4406072baa48df7304434e
-
SHA1
48e19f08d80e880b769a0e5cf20db2520b4728b5
-
SHA256
bc3b5f527832e36202d9e1dd2e2f6b76df4bd81f8e2b9b1007f52e47960b6bf6
-
SHA512
6dacbaff3f638ccf5e32a33214c83607090a2958faa3244b3d2cf1f61fee17989bc2351ace5b2f461404769bcb04be2b401c0e27d7fd5b515323e4f082039ce2
-
SSDEEP
12288:JeOJ+Izf0j1TsQvQdJqlxq/ub58zDN3ApPDQ+WXtg5UiedLZgVGE2dV9R:UOJLqNlQClxqDzVAa+WXtgmiPNYd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e32c9d6cc4406072baa48df7304434e_JaffaCakes118
Files
-
2e32c9d6cc4406072baa48df7304434e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE