Behavioral task
behavioral1
Sample
2e61e878e449d1b00ce0e2d248d37184_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e61e878e449d1b00ce0e2d248d37184_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e61e878e449d1b00ce0e2d248d37184_JaffaCakes118
-
Size
53KB
-
MD5
2e61e878e449d1b00ce0e2d248d37184
-
SHA1
8deb695bb63a487e9ec617900c4859b8b7e2a8b6
-
SHA256
f95b601086a02a4310fc29160c94f64a9b0351f594e13b31965c80bbb13af773
-
SHA512
72cbf5a1b4a5b2130103c8a78c93ef0dcd7bb4e5449bf41b469a3f80657699c7c8e04c76029c205c16dcecf769735226274365396c5563e0a12b335ff0468ccb
-
SSDEEP
1536:nAu4yMdWyL+XmlzN9YwGW7JVsEgp2RMsI:Au4yaJlzMwN3op2RMsI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e61e878e449d1b00ce0e2d248d37184_JaffaCakes118
Files
-
2e61e878e449d1b00ce0e2d248d37184_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE