Behavioral task
behavioral1
Sample
2506f8b3fc1ebd1a88a9a1da7a5c252f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2506f8b3fc1ebd1a88a9a1da7a5c252f_JaffaCakes118
-
Size
766KB
-
MD5
2506f8b3fc1ebd1a88a9a1da7a5c252f
-
SHA1
fd86ccfaca38307149db61590d449b18faea4809
-
SHA256
6a766584b2b640628354912fb7bc1cab3662ae0b7eb83f9172bb4acc6fab784f
-
SHA512
c74fffd7ed43cd1cb6fb544e1b56993468048207cd10626c146053eda1699397807d070d3c4517ba9e6c988770264e55cd89f7eb01746bda0b5a566fd03c8dfe
-
SSDEEP
12288:bskmiY3xX+e81P+pzD4Y4zfQ7uLChB8NDqKTXJDyLONNdOg/i5Q61Qsskk2qsaW:bsX+eOP+/4Y4zHC7kJDyLY2g/i571Vkw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2506f8b3fc1ebd1a88a9a1da7a5c252f_JaffaCakes118
Files
-
2506f8b3fc1ebd1a88a9a1da7a5c252f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 760KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE