Behavioral task
behavioral1
Sample
2e934da544e638a4023413322e35c901_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
2e934da544e638a4023413322e35c901_JaffaCakes118
-
Size
349KB
-
MD5
2e934da544e638a4023413322e35c901
-
SHA1
6451e94385415094c656ea1b8d4ace0f2f30e39f
-
SHA256
49cae54fd9bc1408afac0ef8e2689269118453292a08bc9c744329694335168a
-
SHA512
fbd037b6e3a0a12299d7b22ef37c9c2d81b99d51803f02f77fdfbc8204a81975feea0bc4fb3598825c1971f6244cf82cf3462e2976b6a24668550dd13070c55f
-
SSDEEP
6144:yhEXJV4Of2k2WO9LwSL2CXyi34CW+BlpZzmG4UHJ/HFz3DPkc18L9:O6MOfS9sIjxBlpHDfz3DPO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e934da544e638a4023413322e35c901_JaffaCakes118
Files
-
2e934da544e638a4023413322e35c901_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE