Behavioral task
behavioral1
Sample
2a4a5b02a89b019a873b75db48e4c9b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a4a5b02a89b019a873b75db48e4c9b4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a4a5b02a89b019a873b75db48e4c9b4_JaffaCakes118
-
Size
103KB
-
MD5
2a4a5b02a89b019a873b75db48e4c9b4
-
SHA1
663ea18e44f91c967fd078e44dd3c69e9f4087ab
-
SHA256
c86b0cdb4bdfa1e731559d028de0e7455994a946a04e9c3ae7a8303f52a0278e
-
SHA512
a874c8d95c947c4081f4c1ce7fd32cd018ef0632f1d15eef004b35a2e07c197979fd835f81880fdf34a7eba391b4940336dc59799aa1feea7f962c0fa3a58f06
-
SSDEEP
1536:i+dyicfQqcgbg4WhP+L8G235NJtkc762gQ8JR+dD29y/GRqnGdw99LUSBxJ9xJi:NdyiniEFLLTJAMLG2KwTUOxJ9xs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a4a5b02a89b019a873b75db48e4c9b4_JaffaCakes118
Files
-
2a4a5b02a89b019a873b75db48e4c9b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE