Behavioral task
behavioral1
Sample
2797125b2dcde2b95223cd7c27fb06af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2797125b2dcde2b95223cd7c27fb06af_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2797125b2dcde2b95223cd7c27fb06af_JaffaCakes118
-
Size
11KB
-
MD5
2797125b2dcde2b95223cd7c27fb06af
-
SHA1
66f70c9c03f6899be7d8a26e93a48e5a45409c3d
-
SHA256
973f2c549ec2b47175e6a6c03fbfcbf809b563d2b382c37d4d365f43380ad91f
-
SHA512
c0da72684695490a047fd8aa22202ff3e06c8095a42b00b2c14965d3f774807ef40aa22ca47b6ffe885b4d5e2357ff93c3ad820dd2ff5fea2724b9ba437f0dfc
-
SSDEEP
192:voEnzs5LHJ4aoCi7zev3CxP8gNe1j2rt6NtRICoDRSjaym3B/3x:xzYtYzWC58gNSxNU1waym3Bfx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2797125b2dcde2b95223cd7c27fb06af_JaffaCakes118
Files
-
2797125b2dcde2b95223cd7c27fb06af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE