Behavioral task
behavioral1
Sample
2302eb5f5f2a3776c2092c84aaf44209_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2302eb5f5f2a3776c2092c84aaf44209_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2302eb5f5f2a3776c2092c84aaf44209_JaffaCakes118
-
Size
321KB
-
MD5
2302eb5f5f2a3776c2092c84aaf44209
-
SHA1
db9adb2360d2c7e4028c322bfbf4218e7013b769
-
SHA256
776210602350b4e57940cd3b2f1bfc106eb250e3cd228590e24d8c8f6a9eea91
-
SHA512
9263abe604966c002ccee05824996a61d6883b1d2db449e38a5d548ab43e365c36bab917c1a9fc413bf1bcc6085e7e8c92a802cce6c778e9122eeb01e35398ab
-
SSDEEP
6144:rkcHuoue376c3p6ge/P6oKmW9AOApOSLs4tNoXwVzVUFvb31+2wiWuSk:rkc5u8+cgtPBE9UpJLs4QwUFfDWud
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2302eb5f5f2a3776c2092c84aaf44209_JaffaCakes118
Files
-
2302eb5f5f2a3776c2092c84aaf44209_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 504KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE