Behavioral task
behavioral1
Sample
2e7cf043cdbaa10d79a1010cd0129147_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2e7cf043cdbaa10d79a1010cd0129147_JaffaCakes118
-
Size
73KB
-
MD5
2e7cf043cdbaa10d79a1010cd0129147
-
SHA1
598f1e7c089c9469b00690f46a9bea4220c3e0ea
-
SHA256
79bd63c37114c9251025fa9f79ff78b4a41f16d651ff9bf59461a3627cdfbc60
-
SHA512
9168de2d0ca721d8c72b34b3847cb10198cdd78ee3c3add72dc1faaf2fb3648ecf3407851ad22eb4e86199cb11fc9e6e463f1ba5a20069e33d070f2ce543e3ce
-
SSDEEP
1536:0iElDEvb6r3DKlU1i+RRMJiG7Q9EKGq0V5APiGPdwxRkWS:0isEvb6rTt1i+R6lQ9CtVAiOTl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e7cf043cdbaa10d79a1010cd0129147_JaffaCakes118
Files
-
2e7cf043cdbaa10d79a1010cd0129147_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE