Behavioral task
behavioral1
Sample
2edc89fb312267d89b40ab2eca679f52_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2edc89fb312267d89b40ab2eca679f52_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2edc89fb312267d89b40ab2eca679f52_JaffaCakes118
-
Size
6KB
-
MD5
2edc89fb312267d89b40ab2eca679f52
-
SHA1
c0fec048162d6af195c082f2b268247b096cd8d6
-
SHA256
2eb60a27f967d179fc6fbe0bd361cabbf6789748c12668543ec5da095ed96fa6
-
SHA512
edf30f187879f46bc27fa715c0893e5ab50b175df6038d616d03bd0dccc1949d8c43b1fbd87dd9c605d958947a9b2f908fe26853830631c6c177c18bc2b91471
-
SSDEEP
192:DOSp7sChepoC7A5jjMGu4qwnq2cbLz/phb:lp7sChepoCijcCYLdhb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2edc89fb312267d89b40ab2eca679f52_JaffaCakes118
Files
-
2edc89fb312267d89b40ab2eca679f52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE