Behavioral task
behavioral1
Sample
2e2526e5efc8534dc3b6dfee792ae522_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e2526e5efc8534dc3b6dfee792ae522_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2e2526e5efc8534dc3b6dfee792ae522_JaffaCakes118
-
Size
24KB
-
MD5
2e2526e5efc8534dc3b6dfee792ae522
-
SHA1
57acb49985121332b4056121f31d99abeaaac807
-
SHA256
599374cfe94ebca453072f1949f518af9cb4608518c65ff58591a7d15f46a5c3
-
SHA512
4e1130a2c2c47b4c6e462f63db48bdbaaa0555498e8679ce1c63a607ce5368ec17ae0f31c2657445fd3c05461a1743c705e9065f2ebdd56e533bf759808afe09
-
SSDEEP
768:5TgR6xMSNVXBtBKuk4w8coiWbmm7UwJJHgYl0f:SRKMgnKv4w2iUmm7VDHgYl0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e2526e5efc8534dc3b6dfee792ae522_JaffaCakes118
Files
-
2e2526e5efc8534dc3b6dfee792ae522_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE