Behavioral task
behavioral1
Sample
2b5e4f9f34ff02afb6b02ba3eb74adcf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b5e4f9f34ff02afb6b02ba3eb74adcf_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b5e4f9f34ff02afb6b02ba3eb74adcf_JaffaCakes118
-
Size
3KB
-
MD5
2b5e4f9f34ff02afb6b02ba3eb74adcf
-
SHA1
12388dc6998d15f40764fc8311cd4840760d3c09
-
SHA256
1b4bee80f87301eddf33103721942c8aa993b4355b6cb1d00d8ab88ba5a8bb9a
-
SHA512
4280bdb90498d38a43dc682df4ef47319df05c8f87cb449081995acb99d29ceb69ec94d326b5ba6cb9c39a02c907e14ece2e39a7ea326f911387f15e500862ba
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b5e4f9f34ff02afb6b02ba3eb74adcf_JaffaCakes118
Files
-
2b5e4f9f34ff02afb6b02ba3eb74adcf_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE