Behavioral task
behavioral1
Sample
2b6945aa09b7a78135f95ebee53863fa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2b6945aa09b7a78135f95ebee53863fa_JaffaCakes118
-
Size
398KB
-
MD5
2b6945aa09b7a78135f95ebee53863fa
-
SHA1
1ae14b1ac2e00f68e6950461f7408ebed8861ac5
-
SHA256
b130253837fdee45f428b9524c21ee3d8df88b3c904e9dd659f5c477ca2ee4c6
-
SHA512
90be52401fc7b462fa4a0a4104de5b6ef5f0696e048d2047cbd24f739bb75e5bdf0b8978722729ca5ca7740f5d2a56bcc45d199c09cf5361cf7e6170b88f79f6
-
SSDEEP
3072:TCqnmWMjyR3ltgQsoUqGfwxGCAMOKU0ehUcPcd9hkRLhKfzboBCOL0Wg5:TppMjyR/LsozlN/K+mhKfzboBPYj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b6945aa09b7a78135f95ebee53863fa_JaffaCakes118
Files
-
2b6945aa09b7a78135f95ebee53863fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE