Behavioral task
behavioral1
Sample
2b57454cbcee0e06931374b2f2470993_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2b57454cbcee0e06931374b2f2470993_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b57454cbcee0e06931374b2f2470993_JaffaCakes118
-
Size
3.7MB
-
MD5
2b57454cbcee0e06931374b2f2470993
-
SHA1
2b1ce0000156b0876e2e15391b69e4556ad2640a
-
SHA256
055cadfe19813cbcc63783028f48262d5b1ff2be2abeaab4a63ccde8c7f3b473
-
SHA512
823d2e389548e9c3377d101b129ef2df295a9f7bdc4a813d3778648bd4083e8f364f90c8d24df227bfd2d8ef01b79ecf1fbe0b814e277eb563d1cefb65ec9def
-
SSDEEP
98304:ijpGkgK1vP1m8vSYcfH2T9gPT17NMmCiTzN1:ijpGDK1vvqYcI9gR7N/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b57454cbcee0e06931374b2f2470993_JaffaCakes118
Files
-
2b57454cbcee0e06931374b2f2470993_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE