Behavioral task
behavioral1
Sample
2893c3523a008f664ba6e230abdaaeee_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2893c3523a008f664ba6e230abdaaeee_JaffaCakes118
-
Size
4.8MB
-
MD5
2893c3523a008f664ba6e230abdaaeee
-
SHA1
41db084679e8cfb447f91d1dbcb67c40574be703
-
SHA256
39fe3502527e34a44c12af0e1b03afa4b27b660a2febd76346e836f52fe0f0c0
-
SHA512
bd5c897edb9085ba3cf493d53214874a0bf5065a821af80fb5e761cb15c71b9627b77b3511be8795e1c49b69c1018035097896955619426a5d7f2df13fbe5f3f
-
SSDEEP
49152:wFz13NdKiMO4fL+IRE4QTlT+klrwF0EWpFfmeXay3vRmCFOGNj8mW4JH53R+wVGh:wFhwRD+TJ+k900Xb35mCckFR+vi4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2893c3523a008f664ba6e230abdaaeee_JaffaCakes118
Files
-
2893c3523a008f664ba6e230abdaaeee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE