Behavioral task
behavioral1
Sample
2b131296c55725a2f4ea5c3f93aa4cb6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b131296c55725a2f4ea5c3f93aa4cb6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b131296c55725a2f4ea5c3f93aa4cb6_JaffaCakes118
-
Size
12KB
-
MD5
2b131296c55725a2f4ea5c3f93aa4cb6
-
SHA1
2af0ff404451fd356e24b5cc8b44c6de8487a0d3
-
SHA256
746c8ef2c5da012d84dc39e41b08bf7b01c0c4148229f5b0252365375ac9e096
-
SHA512
cd1e492236e00044908ec144fffdb783d4bdcaaa41cbca26ac249aea2b902030c8c9ef09685c8cc2081783f28aa8215f92e2221b7cc19ebab15a1df8b6b6105e
-
SSDEEP
384:8q2EyjYV3b64NUFRzUSEQhehoEC+UU2PEmxD:1msrdUfTzhr9Eg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b131296c55725a2f4ea5c3f93aa4cb6_JaffaCakes118
Files
-
2b131296c55725a2f4ea5c3f93aa4cb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE