Behavioral task
behavioral1
Sample
2d0eaa3d87a07a46dc6264e30b2e3d25_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2d0eaa3d87a07a46dc6264e30b2e3d25_JaffaCakes118
-
Size
165KB
-
MD5
2d0eaa3d87a07a46dc6264e30b2e3d25
-
SHA1
cf0cf169a45c62d219b7d97702275fcec102853e
-
SHA256
6e3a193033c7b94782d0025d11a8d0740791e9c4446d3f80273c7834714bc457
-
SHA512
b1524393b3956b00eb57abe3431d56701b5140d07826c4de8346fcc77e1bec0463146b5c2831269d4f161cfa40e97f40d1c270d0bfbf16af162d526b6c590e75
-
SSDEEP
3072:ol1RFLtK+BuXgolPJWfIC2QDV4dTMEti43fJ7/TnAT:olHKsEg0kty5356
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d0eaa3d87a07a46dc6264e30b2e3d25_JaffaCakes118
Files
-
2d0eaa3d87a07a46dc6264e30b2e3d25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE