Behavioral task
behavioral1
Sample
2baa54d89b619a682dfad8106face4ae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2baa54d89b619a682dfad8106face4ae_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2baa54d89b619a682dfad8106face4ae_JaffaCakes118
-
Size
4.7MB
-
MD5
2baa54d89b619a682dfad8106face4ae
-
SHA1
576f4b1fc12d82836e4a8fc9c0b7b13bfb3ec9ae
-
SHA256
d72a28a79327a3b7be73bd2c4809a96cd280f7343e643ccb1c30d3a75ee21707
-
SHA512
92a970fb850a5f2762089498230e12bd33fd52223ff393644a091c9c1f25825be2c6610afd96fc9afa3c7b43a81b0b7be70b348768be8b387139a2e109ed6850
-
SSDEEP
98304:vsz/5FfujeCUwvoBL3bUKkEXXbgwGoiYCeOWEhRzjNyyCyyy:vs75Ff/CUVBL3bZkE+9h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2baa54d89b619a682dfad8106face4ae_JaffaCakes118
Files
-
2baa54d89b619a682dfad8106face4ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE