Behavioral task
behavioral1
Sample
2aae8f2488ab818e9b70340a9577a527_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2aae8f2488ab818e9b70340a9577a527_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2aae8f2488ab818e9b70340a9577a527_JaffaCakes118
-
Size
143KB
-
MD5
2aae8f2488ab818e9b70340a9577a527
-
SHA1
66c456f2d02cee67b55afa26acf15b53d2f92b9c
-
SHA256
e6d205d186b4b2f87135e48e8be66ab51d83bef5e2820e611c1cf97752c0649e
-
SHA512
1a24457ae29945b197ff87c08c9ec48979711ee7069ddc762c5aa7a7ab113f8b6ca9c75c43c4fa50fa3538c0ccfc47bedead4ddebbd60b011c28f2c9f3b0b3bb
-
SSDEEP
3072:k+jUlAzkJ7vHfTqn59UClpnOWwxWa1OmsROshHPdynHwZyPfF+l:k+9kFnTqHUC+W8lLsUUPdyQIHE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aae8f2488ab818e9b70340a9577a527_JaffaCakes118
Files
-
2aae8f2488ab818e9b70340a9577a527_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE