Behavioral task
behavioral1
Sample
2706a51fccd718c33419e27be102caeb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2706a51fccd718c33419e27be102caeb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2706a51fccd718c33419e27be102caeb_JaffaCakes118
-
Size
115KB
-
MD5
2706a51fccd718c33419e27be102caeb
-
SHA1
5d72d403b3d3958627ddafb3e135eb3704160afd
-
SHA256
1ce2af86fb0635eb8b052c44ec2dd3813742aeacfb3e34cd0f1f326aec2a6299
-
SHA512
288fe233e78193049e6ec75ce9f22adaee3fcfd7fc03d600d658c1ad991e8fa964848089296406db3c03f71e30bf02baaf0c915e5b5552eae7d835ea97f04dc5
-
SSDEEP
3072:FNceUS+vhK8Vjj5p/U8NgG2KJyFHZJzqSbI174csn5BftG+R4H:7fZYdVjj88d2eyF5Yh7hArtjR4H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2706a51fccd718c33419e27be102caeb_JaffaCakes118
Files
-
2706a51fccd718c33419e27be102caeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2ab9c868a88adb1bc668cb8d724d018
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sections
.text Size: - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE