Behavioral task
behavioral1
Sample
2613bec251c82673268f4fdbc90f1047_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2613bec251c82673268f4fdbc90f1047_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2613bec251c82673268f4fdbc90f1047_JaffaCakes118
-
Size
9KB
-
MD5
2613bec251c82673268f4fdbc90f1047
-
SHA1
e17e523dd502ec416b0dbc23e6b13cfd4ab5223c
-
SHA256
49aca8660847fec85d41f0daaed2f6d6d9a538ceef722b3d54794ff8e9bb3a79
-
SHA512
bd4783628ca61d93c0b945eb42c6c48f530ef128a5ae78b5665c1a8a3dc5e584f9bcfcf8aab7abc9704cb9e74b597566d94472c2e6c495228f04ac814ff1593a
-
SSDEEP
96:5RXG/tMjQSYKDZgDf4d71YAGPrp2FFFLGOpXNzuSJdbVBkEGmWtror4oV2jsfL1y:5sSCS71IPrpeFa0XwSzGmKJj6JmkBCX/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2613bec251c82673268f4fdbc90f1047_JaffaCakes118
Files
-
2613bec251c82673268f4fdbc90f1047_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 639B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE