Behavioral task
behavioral1
Sample
2aff37fa803383189dcd1f351dc6b85f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2aff37fa803383189dcd1f351dc6b85f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2aff37fa803383189dcd1f351dc6b85f_JaffaCakes118
-
Size
116KB
-
MD5
2aff37fa803383189dcd1f351dc6b85f
-
SHA1
1a768e7711bdb3b4652dae9e2a31241b1589e8e4
-
SHA256
cee416a3f260494bb090197819669c7fb6a996a75ed6e7293ce5cae8be94c222
-
SHA512
d07aa3c7ae05ac3ea63ff34b46c164caad0f156ef4bfc122defd7ead9b91f3f8c37586a364cb63404ab5458586e7761c8b5de264abb0dad73654e68397db8e77
-
SSDEEP
1536:bcz1ukO7MXIxteW3UQAl460CLHQXEkY8s0b7WR3ISYjasD01zsRLIVRfm9Jm:bxkctjUgV2QzYB0b783ISYxCzsNILam
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aff37fa803383189dcd1f351dc6b85f_JaffaCakes118
Files
-
2aff37fa803383189dcd1f351dc6b85f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE