Behavioral task
behavioral1
Sample
2721ab65daac1b78feea581d72bb0246_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2721ab65daac1b78feea581d72bb0246_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2721ab65daac1b78feea581d72bb0246_JaffaCakes118
-
Size
22KB
-
MD5
2721ab65daac1b78feea581d72bb0246
-
SHA1
d41058cbac9bd0a2c512735a80f3b547e00ed8d8
-
SHA256
161753e19cb35142a02962cea8f97f84a0f7e0546f47295c1d0aad7e8577172e
-
SHA512
116c92842fe6792fd121fda28b4f359ff2ebf9877e5b74953318d7cd62e4be7c9b9c4a8c558b5e8785d2561e0f6d14c4903f3b87d95a161624cf115c41c9d81e
-
SSDEEP
384:IrS/4LLIF3e9/Zwo8N+wgUWzkwQjhVG/3a7f5+x3nVioaNJawcudoD7Umuq6d:I+GoeRKNzdFVG/aT5qkBnbcuyD7UmMd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2721ab65daac1b78feea581d72bb0246_JaffaCakes118
Files
-
2721ab65daac1b78feea581d72bb0246_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE