Behavioral task
behavioral1
Sample
2c77a78e18f5d150d186037d45c21290_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c77a78e18f5d150d186037d45c21290_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2c77a78e18f5d150d186037d45c21290_JaffaCakes118
-
Size
137KB
-
MD5
2c77a78e18f5d150d186037d45c21290
-
SHA1
1a6589b437f317284bd94d532c53939e5e6e9049
-
SHA256
420c40db01ba224802c1936d035f95b7f76f807dab8cfe7f25688efc5132ad95
-
SHA512
c9ef5891a27fee2c89ada677b2e2989697947b8f2b3a003a3ad3208e81b2ef101fb09beb3c02f0cdb885d3219b1061f653782668b229732a5008b075d27fef37
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53WY:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c77a78e18f5d150d186037d45c21290_JaffaCakes118
Files
-
2c77a78e18f5d150d186037d45c21290_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE