Behavioral task
behavioral1
Sample
2e55f2f30a75de8412b11f3aa3728bbe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e55f2f30a75de8412b11f3aa3728bbe_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2e55f2f30a75de8412b11f3aa3728bbe_JaffaCakes118
-
Size
139KB
-
MD5
2e55f2f30a75de8412b11f3aa3728bbe
-
SHA1
eafa0289199af3dc455bab4584a3c897a8be9227
-
SHA256
d0ecaf792e608840773137234d39e3773f8ceb38f2dd2e482a98315aa707492a
-
SHA512
f91aa9f30027c61d3926d4edcae60a1aae9412d98df1a9f600aa83f69fb55e91b591c10ebe94b2ca85ed31faec8e44fe02cc449fe3a308afa4734caf4f1eeed5
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/mm:YftIPaN33GP16oBxtm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e55f2f30a75de8412b11f3aa3728bbe_JaffaCakes118
Files
-
2e55f2f30a75de8412b11f3aa3728bbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE