Behavioral task
behavioral1
Sample
2f25aab041c61a507380ac761af503fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f25aab041c61a507380ac761af503fd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f25aab041c61a507380ac761af503fd_JaffaCakes118
-
Size
96KB
-
MD5
2f25aab041c61a507380ac761af503fd
-
SHA1
df9026424e51cd3e3b7a884db6482fb63e65f152
-
SHA256
57a4563699a1ad33012b4203d3857e7bc799dbb6de59a9bda04db425b7ed419c
-
SHA512
dd31fcbe508217631f218fd29ffd070a110f09d9ee4615a7c72ab3dfa80e37266e8ae6cb8166ef791fadb0f88fac8e90b72cc7a94a42d64d8ef048ccd3fa7715
-
SSDEEP
1536:jPcVo6r7S/rabKkiQB8XScQ6ssFq6S/ERGwQ8XUJZj18swSKcg77rUeLvce1rO+p:U7cWbKfDQns/zQ8Kj1LwSK1U41O+p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f25aab041c61a507380ac761af503fd_JaffaCakes118
Files
-
2f25aab041c61a507380ac761af503fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 988KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE