Behavioral task
behavioral1
Sample
2dafdba1a6becc30d48c8126dc9573c0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2dafdba1a6becc30d48c8126dc9573c0_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2dafdba1a6becc30d48c8126dc9573c0_JaffaCakes118
-
Size
1.1MB
-
MD5
2dafdba1a6becc30d48c8126dc9573c0
-
SHA1
83054caa48034a9b455687064aec948ec9eb65ec
-
SHA256
99c367fb004822ff3e8847ecbf2f9a4dca71d3d60bc40adfc7b6e8a284ad6482
-
SHA512
dd1483724e21d391f6f4a69acefc2e7e5280712b6188df18b6a96abd64bf3bd5e2ceb4ef8691a47368aee9cbfe1749436c2b2a9acb37a964efdb4320107fde8f
-
SSDEEP
3072:LgrAhFeBIASnZ1dXMjkrMOnvBvmROXBJ8x0:LgrWe6fZ1HMgoWBy+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dafdba1a6becc30d48c8126dc9573c0_JaffaCakes118
Files
-
2dafdba1a6becc30d48c8126dc9573c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 840KB - Virtual size: 840KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE