Behavioral task
behavioral1
Sample
2cdaf2a44c5fd759bce9f3b8f8fe7b14_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cdaf2a44c5fd759bce9f3b8f8fe7b14_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cdaf2a44c5fd759bce9f3b8f8fe7b14_JaffaCakes118
-
Size
408KB
-
MD5
2cdaf2a44c5fd759bce9f3b8f8fe7b14
-
SHA1
dc38a9d7767eaee574e77cb41bbd68a5a09d704f
-
SHA256
18aa918002554256d652f9097e943de120e3c2d95a1d35e9562d582893cdc40a
-
SHA512
00c9a38b64d623580bbe4875ee496a22fb929ae92d7cf5022fd97dd6e0de99193b83e15256d55987776364ab633f658365591dce9af515a7fbb23923e022313b
-
SSDEEP
12288:P3Bt0PtZvrd5YgWcH7GNsVdOYFikhxrQGTZTp9la:fBtUtZvrYgWcbrOYokLEGTtpna
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cdaf2a44c5fd759bce9f3b8f8fe7b14_JaffaCakes118
Files
-
2cdaf2a44c5fd759bce9f3b8f8fe7b14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 527KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE