Behavioral task
behavioral1
Sample
2633c93d796a78d8c1e362dca816b5ee_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2633c93d796a78d8c1e362dca816b5ee_JaffaCakes118
-
Size
7KB
-
MD5
2633c93d796a78d8c1e362dca816b5ee
-
SHA1
925842553077aa60151d0feeda6f56ef7e011ab3
-
SHA256
acd102234b3fa3fed9202544ad37c2a93f16b1d506fa5af71a23239640ed6601
-
SHA512
57871cbf5765133e1d4654725ec0165770df4ca0375faa259c484e60acbcd354243b1fa23ac35862c717721b3badb347a8506bc99e333f58db75fba6d57335c4
-
SSDEEP
96:rZyyEG4krhFZCDCNoz9BXZcrRZefGK/6AuwoWjQJfYpP76agul7hXuqCLGXZ:VyyEGzCDdZIZeOKSSGEWul7tMM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2633c93d796a78d8c1e362dca816b5ee_JaffaCakes118
Files
-
2633c93d796a78d8c1e362dca816b5ee_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE