Behavioral task
behavioral1
Sample
2676ca506199e8640f7fb8fbe7501231_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
2676ca506199e8640f7fb8fbe7501231_JaffaCakes118
-
Size
45KB
-
MD5
2676ca506199e8640f7fb8fbe7501231
-
SHA1
4e82772e1a4340ef82175f4faac0e06d65be517e
-
SHA256
62d9170242c8c6cf2975741bb402d84fc025489c78098c69514b87da65b1baf6
-
SHA512
6d754a965a80bef716f98bcaf9c566d1e243ad4c628d4fb0e332c193dfbe9fd2ce0e9f27ac6c55b71fcbf52c1a222a04985b32e3b50cf93489563a9aecccf6d3
-
SSDEEP
768:i8LmsaxROA9Xpug9mlH6neeEhHaXOW9F2BOcVNuUQhaJ4lxJe9hKU:i8hcZxglcuKrF2B9VNuUnCk9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2676ca506199e8640f7fb8fbe7501231_JaffaCakes118
Files
-
2676ca506199e8640f7fb8fbe7501231_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE