scan
Behavioral task
behavioral1
Sample
2a8e40d79baf9f7d8359293504050415_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2a8e40d79baf9f7d8359293504050415_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a8e40d79baf9f7d8359293504050415_JaffaCakes118
-
Size
15KB
-
MD5
2a8e40d79baf9f7d8359293504050415
-
SHA1
615532d826447161070926e353fa76f26a48f8ae
-
SHA256
8492aa230fe91acc2b69694b64381326fc05e83b030c57760b286c101425ac0a
-
SHA512
daa78def2a4e6bac4049ac3f92f69b417db62e2af978e4dd8f855b20178a6ec1b415919f6477937718e2ddb058ff2069176bbf39ff46dfdcf66708f46ffa162d
-
SSDEEP
384:DYlGaSOzx3iBE+oEUlzE7wnY0BWAJzvbgMe:Eld3iBEzzlYyDJjbgMe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8e40d79baf9f7d8359293504050415_JaffaCakes118
Files
-
2a8e40d79baf9f7d8359293504050415_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE