Behavioral task
behavioral1
Sample
2ecbd841f6a14aecfadbff02a0b29d3f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ecbd841f6a14aecfadbff02a0b29d3f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ecbd841f6a14aecfadbff02a0b29d3f_JaffaCakes118
-
Size
568KB
-
MD5
2ecbd841f6a14aecfadbff02a0b29d3f
-
SHA1
cb035330e954d5ee8d1708be9084f45e1716390a
-
SHA256
6ee29b72bedbc7481f02a6bd24246004656f7af2958644800b3c6dbe1df53bfe
-
SHA512
f7ed34d15578121c51780c521c2be38a46ec318e18b59004df6b0215127b76038ad46544babcb8416627f5c4082a21ddf80b49e7ef4f24132fcb214b421f6894
-
SSDEEP
6144:JsWvDs2z6EJ3Lj1/AkBPI/cmEYv1Zpr8QplBY8Kh5Wr6oa+dH7DCBA3hzhx6UDbU:Rs2z6CJ/jSTYlzMDCix9x6UDbo0h83t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ecbd841f6a14aecfadbff02a0b29d3f_JaffaCakes118
Files
-
2ecbd841f6a14aecfadbff02a0b29d3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE