Behavioral task
behavioral1
Sample
2bce194f041453e047635e861a7f4dd8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2bce194f041453e047635e861a7f4dd8_JaffaCakes118
-
Size
73KB
-
MD5
2bce194f041453e047635e861a7f4dd8
-
SHA1
55792f9a716b21c428dd8fcdda35051411aec7d8
-
SHA256
1ed33e52a800b92613444f5be0ef0129e558b41e09b51f2d14dcd3bbbc0871bd
-
SHA512
17a72eb275cdbce0194e288fe17baf1d6183449d01f8397e88d8f6384c14bf1e71903d003fe8db318ac09a5de8ede314b4bbd937fdd04b7bcc2cd3ee09f6caef
-
SSDEEP
1536:IP2HzkSWLmBL2+ePeXFqbsqfTjZtkTLisS8881aeNG:IP2HrBL2OFqwqfPzWLisb1ae
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bce194f041453e047635e861a7f4dd8_JaffaCakes118
Files
-
2bce194f041453e047635e861a7f4dd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
omtlyyx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE