Behavioral task
behavioral1
Sample
2e4066b8f67dc650acfd191ef3f4bc42_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e4066b8f67dc650acfd191ef3f4bc42_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e4066b8f67dc650acfd191ef3f4bc42_JaffaCakes118
-
Size
2.6MB
-
MD5
2e4066b8f67dc650acfd191ef3f4bc42
-
SHA1
5a427de4af9ced9198486b7cff25152e7445ab44
-
SHA256
e08e106e21161434b8e8e279d6dadd2aa5502870e31cb067ecc662c109f03ace
-
SHA512
94a0e8e8a4a512050a738c00e5ef00faa294af42d78473fffb64142897f8d79c3fe2c52956c0a351a6ec30dd05b2f6e76e5ea8a3cfa4971dbbc08c52281706a9
-
SSDEEP
49152:yHDDYoqAPZCbLoaSb+NMgnvZpyxQv1e7q2+PSRQbm6/ZGI:0DDYoq+YcR6NMEvZWVOcRQbzBGI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e4066b8f67dc650acfd191ef3f4bc42_JaffaCakes118
Files
-
2e4066b8f67dc650acfd191ef3f4bc42_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 947KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ