Behavioral task
behavioral1
Sample
2796f7ccc86ee2fd82a6764cffb6f920_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2796f7ccc86ee2fd82a6764cffb6f920_JaffaCakes118
-
Size
292KB
-
MD5
2796f7ccc86ee2fd82a6764cffb6f920
-
SHA1
ea7bd82e62226d3dd6d03324a016580b602f1366
-
SHA256
1559bb41e6edba184fcc7e4b67ee59dd44d6d48ad1bcb5cb2c4a59222679a5e7
-
SHA512
793a4596ccb1bfdcc2939e0ebb4ec6b01db19bb68ae1345d472e7e89e7161d806e9368daaca4c6b719b69bb008aaa49ae72026d0d3d1ec98e7ec0a2bd69820e9
-
SSDEEP
6144:bwfiwc9u3RMChxGhWNzKEF8I4SSnt2zCgiwUTGQBBKVlM9oS:b4BnFnNzKagIewUTGgKVl2oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2796f7ccc86ee2fd82a6764cffb6f920_JaffaCakes118
Files
-
2796f7ccc86ee2fd82a6764cffb6f920_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE