Behavioral task
behavioral1
Sample
2f0780f4fd8b879b710f02bf0b780eed_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f0780f4fd8b879b710f02bf0b780eed_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2f0780f4fd8b879b710f02bf0b780eed_JaffaCakes118
-
Size
343KB
-
MD5
2f0780f4fd8b879b710f02bf0b780eed
-
SHA1
5e9627ed5dd6c09b8aef538254a15d868e600029
-
SHA256
29294c4caea2cfb4ca7769ff2a05967d2c9ec5e38630614a2ea443d4653fff2f
-
SHA512
8ffa678061348d3727da1a118b15adb919bcb3afb42a3e46b2145d6b5af0bf0fc75be02bfc9302c2614a9af6b11d1216ee73c95bc3829e518a07d237cfe8b1f5
-
SSDEEP
6144:YZhftzEjX3UL9mDuZ0U3VszIQeqyZLQUl8CLoP9tJSLD+lttfV/N6+8:Km34g60cVscPqAsUl8Ck9Sv6tlQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0780f4fd8b879b710f02bf0b780eed_JaffaCakes118
Files
-
2f0780f4fd8b879b710f02bf0b780eed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE