Behavioral task
behavioral1
Sample
2eb238f42442cc53d3891942e9963075_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
2eb238f42442cc53d3891942e9963075_JaffaCakes118
-
Size
57KB
-
MD5
2eb238f42442cc53d3891942e9963075
-
SHA1
8fad2308f96706362998ccb9d4467d819c324fda
-
SHA256
e0140f64e224948ae0c2021ffac0c120053ad877bdcb246d1c1be911ffc79aae
-
SHA512
cb78fe1dedc058bc9b23cc8bf3afeb44c7bdb7b92ead242323f1c9c0e1de9866782bb86a5a297c00b967da0821c96347b8b1f16e70b69ae0f05502ffded95f62
-
SSDEEP
1536:YZLGfb87XEPIkbc1AURjr+K8CiZNQPC1mYr:gL8/IkbcRH+dtNlcM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb238f42442cc53d3891942e9963075_JaffaCakes118
Files
-
2eb238f42442cc53d3891942e9963075_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE