Behavioral task
behavioral1
Sample
2e00ee8b0ab6eb0a8b53cdd617c10349_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e00ee8b0ab6eb0a8b53cdd617c10349_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e00ee8b0ab6eb0a8b53cdd617c10349_JaffaCakes118
-
Size
823KB
-
MD5
2e00ee8b0ab6eb0a8b53cdd617c10349
-
SHA1
63258b2f3506fc6f3dd55e9d15277b80b8484dcd
-
SHA256
e331d41cfdd199bc96f610b568df4b60f39959fd5be14d7f5fc2c54939190962
-
SHA512
e6e3a05021fa0e75edf39d1beb6890413fca361f17209e236b79002071e749a7fc81ff80f1a40e3f96ef901e899f8bda42e83209a2d1566ece93bbd3d43a0ad3
-
SSDEEP
6144:GWZfec9EbXDk6RkQK7E2Ernmy+g4yuHOLE2Ernmy+g4trG1VVE+I5FZrG1VVE+IC:3ZWtI6RksrGOGr6uAtu/JqQZy5SfOROv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e00ee8b0ab6eb0a8b53cdd617c10349_JaffaCakes118
Files
-
2e00ee8b0ab6eb0a8b53cdd617c10349_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE