Behavioral task
behavioral1
Sample
2914c8e44d825cb9f876b553e1b67053_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2914c8e44d825cb9f876b553e1b67053_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2914c8e44d825cb9f876b553e1b67053_JaffaCakes118
-
Size
169KB
-
MD5
2914c8e44d825cb9f876b553e1b67053
-
SHA1
3b7ed42ca65aa391fa1f26c51e89e9235cb8883a
-
SHA256
c8d2308823f054ad02c9364a7c3967afb3c6e7a154de42869d51861485f93296
-
SHA512
0f57cbd027146a5b8a706296f589627c308204e5213503ec5844e580ee506d4c7be3c743659c72821f1573771b212682ea030cb163fa428ebad1e11a78e206d6
-
SSDEEP
3072:jGC+gRUCqzeN6m33qOwtHeZ93QbSk2W+iKcVRTmu6DB3PwFSI2ko2911Z:jGC+5da64ItiwSbW+uRk3PwFP9o21
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2914c8e44d825cb9f876b553e1b67053_JaffaCakes118
Files
-
2914c8e44d825cb9f876b553e1b67053_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE