Behavioral task
behavioral1
Sample
2c010ea36d4d74cc8bd66fd54d792715_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c010ea36d4d74cc8bd66fd54d792715_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c010ea36d4d74cc8bd66fd54d792715_JaffaCakes118
-
Size
22KB
-
MD5
2c010ea36d4d74cc8bd66fd54d792715
-
SHA1
ddff0e5ae6898b8dd176264e1e6a8fece1751366
-
SHA256
42137cf7edf8f4ce95b1734c7b432f4887a814dcb0549a2611fa61d8056b2714
-
SHA512
3ea5aa2abfa7d3972cbe91671bca1378e77ad4b589ec13cc167a252bfb898ccb1801f41572abc049e7b8c5a49aa43db8d37be03af4e8d412ae953d174796da98
-
SSDEEP
384:sgTitrypDzQonp06wZ7kj/dLT+JLvoEHdLza3PsAJ0dqKXx1hC+AxhHbNcnFAj:sntrypzQubwZ7kj/dL0wEHd6EA2Xx1Yr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c010ea36d4d74cc8bd66fd54d792715_JaffaCakes118
Files
-
2c010ea36d4d74cc8bd66fd54d792715_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE