Behavioral task
behavioral1
Sample
2d96cd77096696f0f04c3e574f8a52e4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d96cd77096696f0f04c3e574f8a52e4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d96cd77096696f0f04c3e574f8a52e4_JaffaCakes118
-
Size
170KB
-
MD5
2d96cd77096696f0f04c3e574f8a52e4
-
SHA1
83d9603f4d93a05b5f928e2cfcc899d3918473a9
-
SHA256
9918bbd1f94a4a94d45a65b5be3de142393683903428c6ce6cd0db90515ab1b3
-
SHA512
ce9db7b9272016ef8c0d8348c076f57b2ba2302122f75d9ce80d52de2b7a8b83f1980ec9c3e8444d8073cb5b67a6916056c4458d7ce372b4ed122492962178a8
-
SSDEEP
3072:GdyiniEFLLTJAMLG2KwTUOxJ9xBkdKy284X+wQ0fYgPIkR4THk5:GJp1vJA4MwLxhSdpPgMTE5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d96cd77096696f0f04c3e574f8a52e4_JaffaCakes118
Files
-
2d96cd77096696f0f04c3e574f8a52e4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE