Behavioral task
behavioral1
Sample
2ec873ac4051c5a7d4950342a3558e25_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2ec873ac4051c5a7d4950342a3558e25_JaffaCakes118
-
Size
382KB
-
MD5
2ec873ac4051c5a7d4950342a3558e25
-
SHA1
ed9284b71b2fc8e8219f5c9e481fcdd8d5c3ecce
-
SHA256
ad7c2690d133e2461f4123a87c77309e39c32e674b00196bd0be77d249193913
-
SHA512
da7917a6e8d0bc21b9217d9ed56662b6a998090bc8ae29b3f003eb54345eb998d2a9de337bf84509efa988e66ceb55a4757ea519b4039dde58f509971e1fefc5
-
SSDEEP
6144:PLpOUEVdI7KjLFIbbD9SB6IiODi9Aaq2NNydy7+/pyrFhwXUUdQwmVRXX4p/N/5U:PLpOhVO7KjebbDydi9A7MNUy7ypyrFh/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec873ac4051c5a7d4950342a3558e25_JaffaCakes118
Files
-
2ec873ac4051c5a7d4950342a3558e25_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ