Behavioral task
behavioral1
Sample
2f4c61a216fe3e1bce8b8e31c1f697bb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2f4c61a216fe3e1bce8b8e31c1f697bb_JaffaCakes118
-
Size
784KB
-
MD5
2f4c61a216fe3e1bce8b8e31c1f697bb
-
SHA1
13993832f6fe8b34cb5657f0aa29d136c8f6dcd1
-
SHA256
df3083d43a961414e6641a7efbec03509490731f3858e08f0580ab19befc4bc1
-
SHA512
29a28d3c6aa7fa931ff12b2cac8e23775b34597efb3a59e84d4ea61d82cb93e2280bd30e0cce5309d6dc0d76cc5b27dfccb9ca90418cbe5f60e0fa9a1fbba1ba
-
SSDEEP
24576:LSmDfIQeNif0MzHWEhKKvKypML5RsRqs:OWgQPWEtvKplqRqs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f4c61a216fe3e1bce8b8e31c1f697bb_JaffaCakes118
Files
-
2f4c61a216fe3e1bce8b8e31c1f697bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE