Behavioral task
behavioral1
Sample
2e12737366e3eaf1da554b01f7af0915_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e12737366e3eaf1da554b01f7af0915_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e12737366e3eaf1da554b01f7af0915_JaffaCakes118
-
Size
419KB
-
MD5
2e12737366e3eaf1da554b01f7af0915
-
SHA1
db3c1fe5e45b97dcc976fa94999a0fda613285ad
-
SHA256
2721d9ee78ec028b6b770ee55c24366446c803fa2532924f24c01c53d85cc3c7
-
SHA512
18260ba7aecaa1b8df7e8d2d0701246ec26aaf5a756f53a063f1781330116bfe92fe897cc21331c8bd7bccd15e5d336f94df4740f4a198a5661dee146f47b713
-
SSDEEP
6144:4K69Ta83P8EnnckvABSewgTFL4QgOSGyZdwhazZNyV88+RAhTz2KSlyaIFA1cxUR:4KanP1nBvABhwUdSN7A+RAUVDIFWVI2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e12737366e3eaf1da554b01f7af0915_JaffaCakes118
Files
-
2e12737366e3eaf1da554b01f7af0915_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GUPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE