Behavioral task
behavioral1
Sample
2c25016186d3ab333052dd027fbe7951_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c25016186d3ab333052dd027fbe7951_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c25016186d3ab333052dd027fbe7951_JaffaCakes118
-
Size
508KB
-
MD5
2c25016186d3ab333052dd027fbe7951
-
SHA1
aedfe219462004c6c33e7c8ee1193a7582f0ce09
-
SHA256
92ada4bf61de5dfaea11fef2eb797a64744f99cdc23fd5024009966ef9e18e45
-
SHA512
ad69ae67ceae52b2a8b7bec907c1716413b4f58277c45c0dfc07e66434ec0e24509216017a425f98e74d33ef3e8ba64e278d57b99e61497b9f84affcf637f349
-
SSDEEP
6144:XpUhvIau6UFNAmxXQ/viSmRMQWuH82AX3kJt6PyKjazGcYOSl+i8uvBcND9o+WEK:XWhvLUXAw26Sm28keztSUYByJo5E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c25016186d3ab333052dd027fbe7951_JaffaCakes118
Files
-
2c25016186d3ab333052dd027fbe7951_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE