Behavioral task
behavioral1
Sample
2ba8e53e1bcecff13b308b3d928af684_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2ba8e53e1bcecff13b308b3d928af684_JaffaCakes118
-
Size
10.0MB
-
MD5
2ba8e53e1bcecff13b308b3d928af684
-
SHA1
9bfb95342fb1e93f3e3de2e3da4b10cab23ad073
-
SHA256
e9f5b64a9d12a62dcca21edf67197c7faa2f364c774e32e8553115ec7bd06589
-
SHA512
6dc4174fd60ed78b6fb6b038473a78d10a033948ea7c8138b8496004f98a6c7c7fccd996b82d0a04ee07d484d1b76ff2743f32bfb1aaa334bd1a3a9ea5978137
-
SSDEEP
196608:tGd+M+lO0MYYYmHPYYYYoYYYkuYYYVYYYYuYYYYYYtYYYF4YYYYYYYYYFLIcMUVq:A+McODYYYGYYYYoYYY3YYYVYYYYuYYYO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ba8e53e1bcecff13b308b3d928af684_JaffaCakes118
Files
-
2ba8e53e1bcecff13b308b3d928af684_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 7.4MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ