Behavioral task
behavioral1
Sample
2ebff3927885c47072b0ea79fe973d12_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ebff3927885c47072b0ea79fe973d12_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ebff3927885c47072b0ea79fe973d12_JaffaCakes118
-
Size
243KB
-
MD5
2ebff3927885c47072b0ea79fe973d12
-
SHA1
2c35fe027a13dc4fb967ae4f10537f02cb79c81c
-
SHA256
c9992482ecff3ab1425e3258fad8138983bb4a775d4fde1501b57fea736c9a43
-
SHA512
8f86836ace36a3af5aff3f3768a8ae9919933a38913ca2953e8a505931a60b67effb04ab4d6909be896c12b77b66af1851cc83bbadd8ebfc3f207345308147f0
-
SSDEEP
3072:CKbgzsLfvdZJFrX0mxL7t76QnW4i/5SxTF7gYQJgiwkIdFYMIFtsi1Exjs7QKL9:QIpFX37t760W4CsVgTJgbka3i18w7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ebff3927885c47072b0ea79fe973d12_JaffaCakes118
Files
-
2ebff3927885c47072b0ea79fe973d12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE