Behavioral task
behavioral1
Sample
2899d0a0ccefeb435a2628d0eb6c3bd1_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
2899d0a0ccefeb435a2628d0eb6c3bd1_JaffaCakes118
-
Size
858KB
-
MD5
2899d0a0ccefeb435a2628d0eb6c3bd1
-
SHA1
e7e39faeeee60d51cc85cbb7082977aed1d39a57
-
SHA256
f892f0a1bbf7bef163fce0a8e54302af5e6c3a3e6d5a684d64b4639808a8f157
-
SHA512
483dccc71eb147623e9c3706efce0124875fd30c79f9dd7a688654cb00c3c24c4384171ab8a9af573df0fe08d9b7077c99426002db09ed99e7836c0f75c5c2ca
-
SSDEEP
12288:37DpxxH+HlnGaeiWOhBjyEPBKzW5QprdJwZ8pvG6Xq+S+7C:37v2lGrMfmAKzW5Qprf7vGIx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2899d0a0ccefeb435a2628d0eb6c3bd1_JaffaCakes118
Files
-
2899d0a0ccefeb435a2628d0eb6c3bd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE