Behavioral task
behavioral1
Sample
2d81b142e14a606aaf943d2559b36cfb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d81b142e14a606aaf943d2559b36cfb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d81b142e14a606aaf943d2559b36cfb_JaffaCakes118
-
Size
71KB
-
MD5
2d81b142e14a606aaf943d2559b36cfb
-
SHA1
340b288cfb434c88e9935832c12cea8433ebf81f
-
SHA256
acdc0b8534bfb4d5c894cf884a588f08547b2bde53ffe181d6daf96083449ef0
-
SHA512
e5fed2e934d6303f18adebeaecfbaa7956e492d903790c3db6bb99faf736fb2a0bde70808cd7e65a1c7a8913abb640ec1809ae933c4760b04ab17b55d7897b00
-
SSDEEP
768:2E8bYCyzXskP9iLrFDUW3kuoOnHHk6bBjpuGBf5zUny4a8l0ccvGI6u7obcW1L5r:rbbP9gtUIkGnpppuGBRUQ8KGIgcibSE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d81b142e14a606aaf943d2559b36cfb_JaffaCakes118
Files
-
2d81b142e14a606aaf943d2559b36cfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE