Behavioral task
behavioral1
Sample
2f3f748205faefd700f7e170e46547bb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f3f748205faefd700f7e170e46547bb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f3f748205faefd700f7e170e46547bb_JaffaCakes118
-
Size
5KB
-
MD5
2f3f748205faefd700f7e170e46547bb
-
SHA1
e1bc7f588cb902336dc3a424e016fc68f810391f
-
SHA256
5a8a203312dd847defdda2abd5af2a80db20cc42982c1279fd728030ed8e5c03
-
SHA512
3169ab6424699fb82334032b6952ff4d8e1af266c0318b8265a72c2564edcd2d308ad820eea357b85c404cf68937a1712d2b28d3f9bef791d8e5a1ef0c814463
-
SSDEEP
96:86zscWAW1FgsZexFutCJVMkBkdGeCaKrrZE8SZNfTytNITpRexkj8HW1NBhkt/iH:3scWD34xFutLkBkdvKfZJSZWOR8S8EI+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f3f748205faefd700f7e170e46547bb_JaffaCakes118
Files
-
2f3f748205faefd700f7e170e46547bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE