Behavioral task
behavioral1
Sample
2214109350e71554cb4a4e0937cfd1e8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2214109350e71554cb4a4e0937cfd1e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2214109350e71554cb4a4e0937cfd1e8_JaffaCakes118
-
Size
340KB
-
MD5
2214109350e71554cb4a4e0937cfd1e8
-
SHA1
194296f45f7e9afda2fad63810bcf9365d2c0f39
-
SHA256
0e72a6eb00b8d48524474c158fae73b8729962a0f5c669f6a52e49b898cb7178
-
SHA512
bec5805e9533379b506b82f1b8bf435ff289fb974313ebf644831a45a796c961dd6a75415fdcbdff17f280d107414a39e20495bd92a55bcf76c0786ebe586153
-
SSDEEP
384:5vMkHY7t93KkL0jOOCjGVjr/LFvlaxr9r4jjlGCrSMEHMGus:5vMfhhLwOOCjGh3pl0R4fYESFHMp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2214109350e71554cb4a4e0937cfd1e8_JaffaCakes118
Files
-
2214109350e71554cb4a4e0937cfd1e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE