Behavioral task
behavioral1
Sample
2297df0ddf539d11b95767b31bdc44ed_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2297df0ddf539d11b95767b31bdc44ed_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2297df0ddf539d11b95767b31bdc44ed_JaffaCakes118
-
Size
3KB
-
MD5
2297df0ddf539d11b95767b31bdc44ed
-
SHA1
e54f0223ce5d984a632486c882f7378a520dd0e5
-
SHA256
cd4840f6a9ec61b0d12a3e57ab6d2b3fe434acfb5c39f7aaaa5f5029a67b9683
-
SHA512
b9d8f17e7ac2225b9871803a868cda12ddc9a4bb777f97f10bc048dd325e65ea1b09e19612df4d00622828f826bbc598ad40e92b7cda2a0a62aab906f6e05e5f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2297df0ddf539d11b95767b31bdc44ed_JaffaCakes118
Files
-
2297df0ddf539d11b95767b31bdc44ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE