Behavioral task
behavioral1
Sample
2d0fdf762b6ce457047ae081e3551411_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d0fdf762b6ce457047ae081e3551411_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2d0fdf762b6ce457047ae081e3551411_JaffaCakes118
-
Size
2.2MB
-
MD5
2d0fdf762b6ce457047ae081e3551411
-
SHA1
5a85562897f8b1ec046b15f78c63d7ec12c795c7
-
SHA256
784403781e674aaf2f700ea4ba078357e708f3688f1ed6c84a13ac73f2686c5a
-
SHA512
ca78dc0eb3dd45e24af67a9e1c6030193121a7cb92320c80dc8826513175aba2c8030b3c41e73c3580be9f66c734f6cd81591d320b27b0f97c769c586b2f70d2
-
SSDEEP
49152:lWCm5L4ho6iZyZysE6qd+o/fRmMSJL4hxJzlu6pQxWaSwkK:llwy8sE6ghQuXu6pQslK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d0fdf762b6ce457047ae081e3551411_JaffaCakes118
Files
-
2d0fdf762b6ce457047ae081e3551411_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE