Behavioral task
behavioral1
Sample
2cb67d65c075cd179f262a297f5c819c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cb67d65c075cd179f262a297f5c819c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cb67d65c075cd179f262a297f5c819c_JaffaCakes118
-
Size
352KB
-
MD5
2cb67d65c075cd179f262a297f5c819c
-
SHA1
7632df89531cc25d4a0552e509cbfbb1d92e93df
-
SHA256
91bf95ced5caccdc2a54ed2da7a46a9bc9638c92091f122727f8a6da4a1a0c1c
-
SHA512
a655d11bb126ae03c249ace714b4c9f6a448c4b14066cafd8eaeb2f5cbb5426e0a7b44344d19e0788dc7768c957213c4c018d04201543bf77afd7eab7d59fe6c
-
SSDEEP
6144:+R5YhCLyBqX751p6TsbxmuZX/cUVJ5DdzgPmGVUZSInS+NkoS:+R5UypQG3jVXDdzg0dnSVoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb67d65c075cd179f262a297f5c819c_JaffaCakes118
Files
-
2cb67d65c075cd179f262a297f5c819c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE