Behavioral task
behavioral1
Sample
2e73da8687f705dde787aa9b54749987_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2e73da8687f705dde787aa9b54749987_JaffaCakes118
-
Size
133KB
-
MD5
2e73da8687f705dde787aa9b54749987
-
SHA1
a4d94bd945eb8af38cd5bca5e67b9318fea0ad86
-
SHA256
7e63cfa1c9df728f4401c14ac04870cc50cb28ba0bc96933da5f347afc63d1d5
-
SHA512
cbe2756ecc370bf8360d1f47e5f28d49a7ec74dd70e2fb2cb0a39fe0d79184070b5da38eea94bfba686328d5c77b0a7755505a3c03ccfbbda539110ba21a396c
-
SSDEEP
3072:6ozGY2FmqjEAcmTtW/uaVTbE/KVICKmjRqxH0Q:FKY2G6W/fTbECVIkjR80Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e73da8687f705dde787aa9b54749987_JaffaCakes118
Files
-
2e73da8687f705dde787aa9b54749987_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE