Behavioral task
behavioral1
Sample
2b336f214ee516e17188f9f33532b769_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b336f214ee516e17188f9f33532b769_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b336f214ee516e17188f9f33532b769_JaffaCakes118
-
Size
545KB
-
MD5
2b336f214ee516e17188f9f33532b769
-
SHA1
019c648abe0a9bbd23ce057052103647f87c3911
-
SHA256
dff206e547fa7217562a0548c710349c4601706766a8439502a26a7924e21e6d
-
SHA512
d10b8c7c59214b44929d97c946e8ba5101d55f014526ab125f98ab62b32586486fa761d40c4bcd0699bd7cdf2fd1c96eda90850aa24e2238b974327d1b10468c
-
SSDEEP
12288:oxmIupW7j0BcAboSA7pSg0sp5EpttPWU7fDGgd:oshcAboSAX4zteU7D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b336f214ee516e17188f9f33532b769_JaffaCakes118
Files
-
2b336f214ee516e17188f9f33532b769_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE