Behavioral task
behavioral1
Sample
2460e402a475b1d867b5c03b934ebc13_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2460e402a475b1d867b5c03b934ebc13_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2460e402a475b1d867b5c03b934ebc13_JaffaCakes118
-
Size
154KB
-
MD5
2460e402a475b1d867b5c03b934ebc13
-
SHA1
b8d0185d97e48d582be035671b09f49e6d375058
-
SHA256
14b6660b6ed48844dc729a52e710bcaad88e1da26b0a9eae40d7748716704f57
-
SHA512
b3f4575af04fe62fdffc8e5b0d9831a3570cfc8c02b72c9e638036e4c0ab8f1569da5cf98f8f51531b137f0c42fbb7f61a6ce71259f5cc15a47e4fe00d6d08f2
-
SSDEEP
3072:FWdnIoAcbR1PUTdsHoj+T/d3YXfjwAYdmWJpAfkRETNE0nnau5:FWF2cNUTdsHoj+Tl39kWJpAcETNBau5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2460e402a475b1d867b5c03b934ebc13_JaffaCakes118
Files
-
2460e402a475b1d867b5c03b934ebc13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE