Behavioral task
behavioral1
Sample
2506422f0e589d14cf057abacf7dc4c1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2506422f0e589d14cf057abacf7dc4c1_JaffaCakes118
-
Size
784KB
-
MD5
2506422f0e589d14cf057abacf7dc4c1
-
SHA1
4dd8a12376940be28d46095d3ceeff8903e74c4f
-
SHA256
94976f59b437f434bc48ab619543d3e7f73b2088d08ae4ec20ba80e2d70738df
-
SHA512
70fcfcea3f7347f423837f3fcba23cc77136ed841b2ae038bb07c674feb9507e4e866d6757c39c091f00b84cd9c193a66a3b2bae6df219009af591c3b9ce6dbc
-
SSDEEP
24576:82vEYcfO3SZIhcETtUaIoP3A4MpTd0XD+5FlFVOX:82vEH2COGEpUaJojHGSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2506422f0e589d14cf057abacf7dc4c1_JaffaCakes118
Files
-
2506422f0e589d14cf057abacf7dc4c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE