Behavioral task
behavioral1
Sample
2619ca144e44adec881ba4bf15146d43_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2619ca144e44adec881ba4bf15146d43_JaffaCakes118
-
Size
121KB
-
MD5
2619ca144e44adec881ba4bf15146d43
-
SHA1
c980c74150bd7ac8672ca5600ce0c1336ec7ae5a
-
SHA256
a91c77aa73b64a3e848144a063e68ac58b7901d28e44d1b275618a3cc1663770
-
SHA512
0a8f3edba0f88bccf6c968e7cec69954780c7ecaca541dae700b162e9f1b8de014f2cacaff7cd2108d0a712ef1eedb612373d433e6f6244114365c56bfed8fc1
-
SSDEEP
1536:a3TMb1FpPtaanouy8qv3f8r9ehoTX3gKJN4qEDxUPf8dhUrO:eeLpPtboutSPoLLBX8DU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2619ca144e44adec881ba4bf15146d43_JaffaCakes118
Files
-
2619ca144e44adec881ba4bf15146d43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE