Behavioral task
behavioral1
Sample
2df4447a323d03b6a1c26678a7bedade_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2df4447a323d03b6a1c26678a7bedade_JaffaCakes118
-
Size
21KB
-
MD5
2df4447a323d03b6a1c26678a7bedade
-
SHA1
2bfe99b412559a4f0af459c7cbf99279476bfb0e
-
SHA256
01beb8cffd1e82c5205a07be3fd386a20f6fbf99cce632258736663e2adcb051
-
SHA512
26db0e8c61a08595ee21d083a34d48dda0d81d648dbde035c7435b81c45eb35b41fbe8d2eebc1ace39b17b9752ddf49f06bbddc693b6a5fe93842bfcbc26650a
-
SSDEEP
384:fIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZZI2E9O4aNJar:fRGuY2P0Vo6r7SiAwyrMRjbbI9ORnbc+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2df4447a323d03b6a1c26678a7bedade_JaffaCakes118
Files
-
2df4447a323d03b6a1c26678a7bedade_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE