Behavioral task
behavioral1
Sample
2d668083d250f1b1876df312e07583fa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d668083d250f1b1876df312e07583fa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d668083d250f1b1876df312e07583fa_JaffaCakes118
-
Size
290KB
-
MD5
2d668083d250f1b1876df312e07583fa
-
SHA1
12ed69511f99aa69799fe4f87f20cbe058963ea2
-
SHA256
d69f3bc52f2dccd4a1b545a25b79c99ce3720a3225e36e20c6b2b79e4cbe49a4
-
SHA512
cc90ff7be0744f95b86aa4b53358161756e88f655ddfd65042bd2771a1add3be0d2c2994904275e4d5f3683bded7cefe39496675f68893376eac087ead76ea90
-
SSDEEP
6144:D5LRatnPiTF5k74FKDIKjtU3CGF77bulC:e1qTF5qPDIv3CY7bG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d668083d250f1b1876df312e07583fa_JaffaCakes118
Files
-
2d668083d250f1b1876df312e07583fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE