Behavioral task
behavioral1
Sample
2e3c5c615ca54774c9b3001640fe2cff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e3c5c615ca54774c9b3001640fe2cff_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e3c5c615ca54774c9b3001640fe2cff_JaffaCakes118
-
Size
1KB
-
MD5
2e3c5c615ca54774c9b3001640fe2cff
-
SHA1
cae1b511245a912d9787e3d9633f2897fb7f1b0d
-
SHA256
c7f422d5f2737cbaf1da45f8c2b8ea5eadbd70692d6d9f45767d561f6708be73
-
SHA512
db45275a257a3324ab7eb20cd5d073531a66f8e7178acf58566691ec40bab6268b994fd089fa979ec2c844f6e58f58d62a27bde5fd61d38b5f7d33d269a50c7c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e3c5c615ca54774c9b3001640fe2cff_JaffaCakes118
Files
-
2e3c5c615ca54774c9b3001640fe2cff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE