Behavioral task
behavioral1
Sample
253becb7cc5f9d563fd13c0b686c1765_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
253becb7cc5f9d563fd13c0b686c1765_JaffaCakes118
-
Size
1.5MB
-
MD5
253becb7cc5f9d563fd13c0b686c1765
-
SHA1
62259b65ac41099236a44f898b3cd55187cd99c8
-
SHA256
a02f9d775458b1ab934f0ffd2d37516b61bdc3aa8b13cdbf5cc86c7e889c6d18
-
SHA512
5482ae324186e3fd8c33c3e88ea7df531c9aa0122fc905a882b790e9f6c4baa9b91172ba488ff1dcbec1d9c7159e1a8c77bf898ddabdcc03ba953e523596d4ea
-
SSDEEP
24576:8B5slkS9bIDNAyoFghpVZwls1nZTAoVLSbDyFbhtgoruZstgPs9W:gsfRKhXkInZA2+bDyNgo9tg09
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253becb7cc5f9d563fd13c0b686c1765_JaffaCakes118
Files
-
253becb7cc5f9d563fd13c0b686c1765_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE