Behavioral task
behavioral1
Sample
2a2e1149688d13791fb23cc96a48df2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a2e1149688d13791fb23cc96a48df2f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a2e1149688d13791fb23cc96a48df2f_JaffaCakes118
-
Size
952KB
-
MD5
2a2e1149688d13791fb23cc96a48df2f
-
SHA1
b9c018375675490d18f908904ce4aae05fcf6460
-
SHA256
67dda6673807350d13e5abb5948670179af2708e1bd3a8e744667e62a33c8621
-
SHA512
3fdb56b5beaefe60927949d781971b10af3a5c1d9e4452d84c4f6ed459f6ac14db8efd193cb3c04fc2c8fdcb9184aa9f8544b35f256cf2d425b808c385da0757
-
SSDEEP
24576:hmdPnAGlScugzPmN0jZqdYWmQUINCM3iT70a7BA:h6PFlHPmz3g70a7BA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2e1149688d13791fb23cc96a48df2f_JaffaCakes118
Files
-
2a2e1149688d13791fb23cc96a48df2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE