Behavioral task
behavioral1
Sample
2bb51686cda10e307d76e318d2a4337d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bb51686cda10e307d76e318d2a4337d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bb51686cda10e307d76e318d2a4337d_JaffaCakes118
-
Size
370KB
-
MD5
2bb51686cda10e307d76e318d2a4337d
-
SHA1
4e7c5cce33dabe1af5c3d009a989c08d192f1741
-
SHA256
0a34099146b5a2efa661ce8430b64271dc9eb9d0b254e6455e73419bb0f81d12
-
SHA512
4044378ccf5c1025d91e7c5bb3234dd78f736083a9d269098f5bae86be8bb26a5025a1d461435de7437225b420c8a8787946c9e626d7f661503ff07479def84e
-
SSDEEP
6144:RMxFwu3bR86EB3Uc8rMa9Xh0ZdHbZRMHeBa2LicmDPjUQWZqNydSNa6D5G:RMI+bQK/Ya7ErMHexqD43v160
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb51686cda10e307d76e318d2a4337d_JaffaCakes118
Files
-
2bb51686cda10e307d76e318d2a4337d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 570KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE