Behavioral task
behavioral1
Sample
2c60cd0b0412c8c32f36d0666a29f797_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c60cd0b0412c8c32f36d0666a29f797_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c60cd0b0412c8c32f36d0666a29f797_JaffaCakes118
-
Size
204KB
-
MD5
2c60cd0b0412c8c32f36d0666a29f797
-
SHA1
939c472babc82ca91a92d543a8b5fba9b73c3dcd
-
SHA256
1b22a86fd137c7d7a113a6d73c40af49317f9c7106ef346e0e90734739c9daf9
-
SHA512
1aeb5bef2fffa9554f7f8aed581722b1efc9c6a4f8850101171c0e3ff0142b1b9438c5b27f24bb8dfb2b62f48f9ec432b3ba3c2b09ad65fc75dfe3cd7f51ae03
-
SSDEEP
6144:WvSCrt/27hY5PGG+QuJ/biCJj4Z241k3:9CrAC5PGG+QuJ/btJj4ZY3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c60cd0b0412c8c32f36d0666a29f797_JaffaCakes118
Files
-
2c60cd0b0412c8c32f36d0666a29f797_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE