Behavioral task
behavioral1
Sample
2820d1e8f8b505e05f1215457c0dabc1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2820d1e8f8b505e05f1215457c0dabc1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2820d1e8f8b505e05f1215457c0dabc1_JaffaCakes118
-
Size
56KB
-
MD5
2820d1e8f8b505e05f1215457c0dabc1
-
SHA1
f53eb6c4e61cc73703b99f86036cef2e9f0a4336
-
SHA256
161fce42ea350b4da0f807b610033e96a4c9a300435a37e86e9f194c043ff737
-
SHA512
b77bc16f3abd77cd5b69ae6bfe52f31674474fedc796729362f88a86dc71d6bfdb9c541c7c2faa4ca00e73c4d15b6678e84c815152485f7be68f8f062a6590a2
-
SSDEEP
768:Yw1+qqTefChCjJx5Z/ehBMnPjER3FXFzivTuhk7lbOltCOf6V7fE6iJA5C4aPQ8Q:Y6GnCjhZypxi7iGOi074aPE6wN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2820d1e8f8b505e05f1215457c0dabc1_JaffaCakes118
Files
-
2820d1e8f8b505e05f1215457c0dabc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE