Behavioral task
behavioral1
Sample
2ea4044ef65c7adba6e420e75558fe9e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2ea4044ef65c7adba6e420e75558fe9e_JaffaCakes118
-
Size
379KB
-
MD5
2ea4044ef65c7adba6e420e75558fe9e
-
SHA1
9905c902ccd12e133b371e59161f9c312dc14b8f
-
SHA256
2e8bbc9bd939b9c8c427f9452517eb2813cd3b1d1189e22b6c8ff2a60f2b9c4d
-
SHA512
93b0f0f6d9b1861db7a427d2c630f05825c7e799db3621721742315492db284c2fa7f378595ff860bed4992d45573e5d9d45ba7766e019ce62a2e6ed354b0631
-
SSDEEP
6144:6+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LEM:ks03z8tgkGJRxpw4osO2JoS0LEM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ea4044ef65c7adba6e420e75558fe9e_JaffaCakes118
Files
-
2ea4044ef65c7adba6e420e75558fe9e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE