Behavioral task
behavioral1
Sample
2bbb17102048d18d4a8c43d3f369de56_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2bbb17102048d18d4a8c43d3f369de56_JaffaCakes118
-
Size
138KB
-
MD5
2bbb17102048d18d4a8c43d3f369de56
-
SHA1
14f3c04c94b2297c4415ddaf1398ec83d8065ca6
-
SHA256
78240e92f4d18e08e2614eb0683615754377beab1a4b7e5c2d6d59c55c82b863
-
SHA512
32d9937a1eacad8559709f763aa0d2c7b39b1e4ce0f1991ac802379fcd9e84b767f9beba5d214a8a67cf9c7026241cb97a8f84c70daaa86bad9fc21418eff116
-
SSDEEP
1536:x65GisHp0Pb6dtS+HUyfGaaEPCL/7bDQUUfLKRHzyhU/muiwSwsnMn8c:xsGiOu6W+HQXYUukgwmuiwSbnMn8c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bbb17102048d18d4a8c43d3f369de56_JaffaCakes118
Files
-
2bbb17102048d18d4a8c43d3f369de56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE