Behavioral task
behavioral1
Sample
2a145542ab3f77e7dfb63ed3992a3a6c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2a145542ab3f77e7dfb63ed3992a3a6c_JaffaCakes118
-
Size
1.3MB
-
MD5
2a145542ab3f77e7dfb63ed3992a3a6c
-
SHA1
4ed86d73f66c1689c3baa36c24347dba318c9cea
-
SHA256
5fb032aa5de454d76bce2deb33de74fbadec32e8ec3bfb6a9cbb95feee014e9c
-
SHA512
9521943abf719c3673ce0f6b12a0592665a05c0ec73f19bd4246fe73a73554f2f1c2b98e54e5a99cb4257c79a6060dcc8b1122b5299375b303ffa5ac5c5e9ffa
-
SSDEEP
24576:TFqvxyPtvrLrzjKs1r3YmgVfgmSN15U/ZfKm4TLgcLlWc:TF+xy5771r3YWmXfK1fXLlp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a145542ab3f77e7dfb63ed3992a3a6c_JaffaCakes118
Files
-
2a145542ab3f77e7dfb63ed3992a3a6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE