Behavioral task
behavioral1
Sample
2f3ac8b60ab0b1d812e8989313def74d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2f3ac8b60ab0b1d812e8989313def74d_JaffaCakes118
-
Size
402KB
-
MD5
2f3ac8b60ab0b1d812e8989313def74d
-
SHA1
1c9abe9503eb7c04992a4365d139b24fca7417e8
-
SHA256
be02a231faede10e8d2ec524f8165af683b2a62b5dba389b9c26ebcb64307d65
-
SHA512
25fe14aed45b59346b8215d58b2737750bf4787c7e26d10bda0e281a2d052ffb76e1e46e14d50aa4423ab5762a13c567159b875c2d0f52e3114ca665e6e91d31
-
SSDEEP
6144:BuvVp1jP8Kybhy+d+HVAlcJjxrFu9mQCUhsd6lLoAaNvGv7d4SR:YVpRPx0K1Amhu9mTU6oGo7dBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f3ac8b60ab0b1d812e8989313def74d_JaffaCakes118
Files
-
2f3ac8b60ab0b1d812e8989313def74d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE