Behavioral task
behavioral1
Sample
2848a881cbe2db30eb61d1054b75d8e1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2848a881cbe2db30eb61d1054b75d8e1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2848a881cbe2db30eb61d1054b75d8e1_JaffaCakes118
-
Size
12KB
-
MD5
2848a881cbe2db30eb61d1054b75d8e1
-
SHA1
cc4c6988aa688b34e5fbe32896912b80f2d1281e
-
SHA256
9af22a34b499c94fe5422451723350d92c3617227119fd84158becc571708bb7
-
SHA512
2357c1903aaf2554796517e837082f8963972beba34ee5a3d1f078702ec125ae6e45058d2d204a56d7a17910ffea755eb0675c71947d901497deeb65be6cf163
-
SSDEEP
192:6b1pD8XNfAc8ERzZqu+UFAznbSnpcSZBg/kt3id8gfN92AV5tDdeWE:65GNH8ERzZP+ocgpc1y/4IgtI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2848a881cbe2db30eb61d1054b75d8e1_JaffaCakes118
Files
-
2848a881cbe2db30eb61d1054b75d8e1_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
UPX0 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE