Behavioral task
behavioral1
Sample
2798a7f743d75052d7fab90f7b3abd66_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2798a7f743d75052d7fab90f7b3abd66_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2798a7f743d75052d7fab90f7b3abd66_JaffaCakes118
-
Size
234KB
-
MD5
2798a7f743d75052d7fab90f7b3abd66
-
SHA1
e3a247564c354c836d1d0f127415e7fb27f4a615
-
SHA256
22efb1eb26dbb805ccec0b0a30a13eafd2dccdaa39906e17425c60fdd9c32e71
-
SHA512
5f7ba43409f9bf7366e5e69324a43b7db8bde4e7a30e1c607c9bb342fb68f03c5672e119f411f1e1e48f6ed6de0b379852d4545d53abc8df7b31f5f6a1cf151c
-
SSDEEP
192:pBu5AkXdFboj7yMHkR8u+jCWW4m2MO1c7Lg1uiya44jYh68:p+Ak+/jCWTMEc7Lg1eaFYw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2798a7f743d75052d7fab90f7b3abd66_JaffaCakes118
Files
-
2798a7f743d75052d7fab90f7b3abd66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE