Behavioral task
behavioral1
Sample
2df0f1e6ba3f695ac437247bd6041f4f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2df0f1e6ba3f695ac437247bd6041f4f_JaffaCakes118
-
Size
2.6MB
-
MD5
2df0f1e6ba3f695ac437247bd6041f4f
-
SHA1
e6c84e16e3e9d881131c3fc44e716c1038c97020
-
SHA256
681c4e436024a4c4ed3f28a9a7c52d40e2819b7720c8d88814c1b371f246a98d
-
SHA512
df9602e274252007485a4fc4359d68b335e670715f3405c3480b725e8c1d20ea036aec6a86c8d7f1fb93c94f993f45518b6bd3f6be39e6f3e1a205854d100bf4
-
SSDEEP
49152:XhAjEsNZQ2mz0DIlDs1myIn51p7B32FXaTCnvJzO8pW/Iay3:xAET6Sg3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2df0f1e6ba3f695ac437247bd6041f4f_JaffaCakes118
Files
-
2df0f1e6ba3f695ac437247bd6041f4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE