Behavioral task
behavioral1
Sample
2592a8a5cf8d7b2454e5287f1670b6a4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2592a8a5cf8d7b2454e5287f1670b6a4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2592a8a5cf8d7b2454e5287f1670b6a4_JaffaCakes118
-
Size
5KB
-
MD5
2592a8a5cf8d7b2454e5287f1670b6a4
-
SHA1
1e2a29ce69e7374a1e982b3bd24003ff22a770dc
-
SHA256
c2ca9ec90c4715276e213e3b6dd328aa8a9219e15fbf313307fde1b92393d859
-
SHA512
0ba20f4b9d24a1fbac708517484de3667cfa17aa756f1de770ea398dd6392109b4f60ea217a4b92964d2874e9c199d09b3222cb987d034351e67b5d698628916
-
SSDEEP
96:gVGvKCszuYO5UPCbHcKkAaZi5+FHyYQuEbqYsXeCx/57OG8A8qEZ:gVGv2uLuPC7c+t+B/wqYeeCx/57Kj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2592a8a5cf8d7b2454e5287f1670b6a4_JaffaCakes118
Files
-
2592a8a5cf8d7b2454e5287f1670b6a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE