Behavioral task
behavioral1
Sample
2890e128e9dc56f4797929fe579a33bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2890e128e9dc56f4797929fe579a33bc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2890e128e9dc56f4797929fe579a33bc_JaffaCakes118
-
Size
576KB
-
MD5
2890e128e9dc56f4797929fe579a33bc
-
SHA1
3ff880bb14ac588004beff6f910dd1791d0b4474
-
SHA256
e7bfedf1a2faed0abe30c0df1e18445b3d9b6e685e6e81e11d3c4dd2d1dcd7dc
-
SHA512
4b3610d2922998c1d816678e9fb2b29c04ac1515ec779dffda55739ff111b8a188de03602fc20980e015b3942c8be69d4e8e4b3e9b79ef1fa8fcf23de7d67278
-
SSDEEP
12288:fwSvhgGn/pNejC5VFiHkCqkqpVcF/EB8/heeXoSOG4:YIhgG/mjCViHkCKcRHgG4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2890e128e9dc56f4797929fe579a33bc_JaffaCakes118
Files
-
2890e128e9dc56f4797929fe579a33bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 548KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE