Behavioral task
behavioral1
Sample
2e8b6befd9fe1aac4e2cd9c778cd3972_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e8b6befd9fe1aac4e2cd9c778cd3972_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e8b6befd9fe1aac4e2cd9c778cd3972_JaffaCakes118
-
Size
177KB
-
MD5
2e8b6befd9fe1aac4e2cd9c778cd3972
-
SHA1
daf324a07f0004371178a08bffce3d4877cee7c8
-
SHA256
95a94105933c2e3b8b0f40534b23c75b7021e689f9c7222dde5217ac7ba2dd08
-
SHA512
ca1b42b62a1b4c986cb3b61959b2a4e0cac7b79e202a5472a2f47140d7c84d9561cf25bfb8503b16a853db852774e4991353ffc424753d43f2408cbf0367c518
-
SSDEEP
1536:MQeQ7pBGhkJMB9HTZIwYdGO1SRZVwS7iWPZt+Bxjs32N+3gJZczDPn:xdBGOqB1SqVwS7Ngxjs32N+3gJ8DP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e8b6befd9fe1aac4e2cd9c778cd3972_JaffaCakes118
Files
-
2e8b6befd9fe1aac4e2cd9c778cd3972_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE