Behavioral task
behavioral1
Sample
2f3cd6ef436f7df613ff8d32fe988f6e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2f3cd6ef436f7df613ff8d32fe988f6e_JaffaCakes118
-
Size
784KB
-
MD5
2f3cd6ef436f7df613ff8d32fe988f6e
-
SHA1
d8fd6e2eec1b8bdf4af2e1b094cd15d503ecaf3a
-
SHA256
993f7ee03e95fb95fa9be72d2f59ebf3797dbed2dbe1c57d23cb27803ef4246a
-
SHA512
7bc6d3588a5f19d962b4b174896ee76c569325cff54523ab2c8f166876ef5a013d61a1703fcf38b0af3b5f37f4249d21dc772f8c491ba06939980aa9dd407be3
-
SSDEEP
24576:82vEYcfO3SZIhcETtUaIoP3A4MpTd0XD+5FlFVOX:82vEH2COGEpUaJojHGSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f3cd6ef436f7df613ff8d32fe988f6e_JaffaCakes118
Files
-
2f3cd6ef436f7df613ff8d32fe988f6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE