Behavioral task
behavioral1
Sample
2b88b6424dcb9a378d48d8db34d35c49_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2b88b6424dcb9a378d48d8db34d35c49_JaffaCakes118
-
Size
358KB
-
MD5
2b88b6424dcb9a378d48d8db34d35c49
-
SHA1
9ecb1052c15e54e950149c0e79e3050020eebc12
-
SHA256
9d32ab7d69fd0f76e7315941908de174bc420b5c03a9a29f6fe2ff0ac75c2dce
-
SHA512
acc9a303f0c6c879f16c5b5f3be5a805a8cd18cdea0081e74beb4e1e4c1ecc9b04128af30310f9b48c1b69d43c8c72d09b207a33d06cf57a6cb96748265520c0
-
SSDEEP
3072:OrMyBpL/+8SbNNZ1uUAjpL/7NMcpL/7ZI/pL/7HM8pL/7j+2BPXC:OrME/ZQfLuJ/d/6/P/1c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b88b6424dcb9a378d48d8db34d35c49_JaffaCakes118
Files
-
2b88b6424dcb9a378d48d8db34d35c49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE