Behavioral task
behavioral1
Sample
2f67a0dabbafef27bef7212e9ce5b632_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2f67a0dabbafef27bef7212e9ce5b632_JaffaCakes118
-
Size
164KB
-
MD5
2f67a0dabbafef27bef7212e9ce5b632
-
SHA1
d2cf675497483227ee8b347a71f51a0fe75e0b54
-
SHA256
5c99d15c0fcb1b8e00c1571e4d3c54efa79cd601d47d22fc4211452515f7b1ef
-
SHA512
473e39e1c8d2aef6b524b65809ab8de52ec5beb1d1e5874716781af61bc5d42d4bfc0e0642dd2b510b7c8bfb64cff1d5d99937dc4862adafaa7f53aa5161b1bb
-
SSDEEP
3072:Pqo/3Mf6b2QLcnZMryLM07haclFM59Mv14H+RlI5N7jnlSYb4RBYsPXGp:Pqo/39LAWF5jDf5NPQ5L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f67a0dabbafef27bef7212e9ce5b632_JaffaCakes118
Files
-
2f67a0dabbafef27bef7212e9ce5b632_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE