Behavioral task
behavioral1
Sample
2b30d111a7e276f9ea2d006638cb0272_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b30d111a7e276f9ea2d006638cb0272_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b30d111a7e276f9ea2d006638cb0272_JaffaCakes118
-
Size
399KB
-
MD5
2b30d111a7e276f9ea2d006638cb0272
-
SHA1
7151980fbe4f3ea9910d5719b8d6ecbbde51b099
-
SHA256
32fea4f62d17e432659e9057646d8f9191581d45955d2de5665f9bb3e9b20b62
-
SHA512
30048720831f6c1ed13a44aa7b283ae0e4fb2b257971ec14b17a33af20cb76f73b4c9e9b6bd7b8d3f3f97699076202f248d977eaef4f657608a25eed908d6641
-
SSDEEP
6144:gCbitvA8lUc2C7RScnoSeYHQ2GQQp6i4Zvfr:gC+tvA8p2CFS8oSWp6i4Zr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b30d111a7e276f9ea2d006638cb0272_JaffaCakes118
Files
-
2b30d111a7e276f9ea2d006638cb0272_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE