Behavioral task
behavioral1
Sample
2252d09a6bffa0ae57b5661dadde6c50_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2252d09a6bffa0ae57b5661dadde6c50_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2252d09a6bffa0ae57b5661dadde6c50_JaffaCakes118
-
Size
75KB
-
MD5
2252d09a6bffa0ae57b5661dadde6c50
-
SHA1
753431e6fe7f00a35850b31b84d417ed851a7923
-
SHA256
2ff9f9699e56d5033640cede0bb69eb22178ad12dc6febf14d4034877a1323fc
-
SHA512
be3405c55db31740be5ebdf5eb0ee2b2ceff7e43495acbcdc401ee04311e8257944a82b5d2d541bb241baeb83e9f8f402ac524bc9808720c887736d536f9e732
-
SSDEEP
1536:G2Lpeqc0jsxo5hi0oilHKq7hDKhGAF/7sNaS:1Lpeqc0Ixo540Eq7luGAk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2252d09a6bffa0ae57b5661dadde6c50_JaffaCakes118
Files
-
2252d09a6bffa0ae57b5661dadde6c50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE