Behavioral task
behavioral1
Sample
2e8a0b3fbf1bb21e56beb47242335c50_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e8a0b3fbf1bb21e56beb47242335c50_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e8a0b3fbf1bb21e56beb47242335c50_JaffaCakes118
-
Size
511KB
-
MD5
2e8a0b3fbf1bb21e56beb47242335c50
-
SHA1
66043a9853ae3bd6eb270de99c9ed5c9211f9e34
-
SHA256
da56e922d7db7eec4dfcf41a15a9addf9cb2a8ab1f5936a2d29eb5b5f1621c12
-
SHA512
2ecea9366a041868476bd057dd0b388fe6d873e7f68dfdd30818bbf5e52c6fa18ce77920044cd7d48ce56392f5e88346795fef4da1e2b6a9ce76fe03131de151
-
SSDEEP
12288:gM3zNZrDd0BU/uxkXJJSyJfH+wKmf5BLrB9q2MlQY+FSO:PDdsSumXCyx+wKqF9qxQBFf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e8a0b3fbf1bb21e56beb47242335c50_JaffaCakes118
Files
-
2e8a0b3fbf1bb21e56beb47242335c50_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 654KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE