Behavioral task
behavioral1
Sample
2e49e2145abd430df98096330c2d08e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e49e2145abd430df98096330c2d08e9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e49e2145abd430df98096330c2d08e9_JaffaCakes118
-
Size
1.6MB
-
MD5
2e49e2145abd430df98096330c2d08e9
-
SHA1
0e63a0a7a06d03aa33e28d32621912a00d555877
-
SHA256
fcc9d8542337b2a67c429b5d67ebfea4a1a90d0e730750236bef11cb6716e819
-
SHA512
1281fbe43b4ec4fe00e9d6479f520447ef6183f6ee1dae276934d07ef0371595e6ce550feaf9c187e61ba4ea825e465bffc1f6de3fa4299f1824b37259a93a01
-
SSDEEP
49152:xGlsTsguHRePyCwcakLz0AP5D+3tBGxcakLz0O:xGlystHRePy5cakcAPkdAcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e49e2145abd430df98096330c2d08e9_JaffaCakes118
Files
-
2e49e2145abd430df98096330c2d08e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE