Behavioral task
behavioral1
Sample
2f6f17489178f48400e7898b9151cfc5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f6f17489178f48400e7898b9151cfc5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f6f17489178f48400e7898b9151cfc5_JaffaCakes118
-
Size
6.5MB
-
MD5
2f6f17489178f48400e7898b9151cfc5
-
SHA1
6a059d5ead1c7c650eb8d73ac53a440ab79c7edf
-
SHA256
477e9d3183f9a351daa4747c2c61e70cfe811c3c16f81cc4c2ee99e450008dbb
-
SHA512
9714074b89e39f8c74a9b51c5833b62087d5532b9382d9dbc9d82ccc7cfb8ad6da6601a01506e640301cf1f3c9eaf5662bdbf19c79cf53bbe3130335e706a925
-
SSDEEP
98304:/viiv9ve3bA8E5gItN9Z9xN6wD5UEpyVDDhKFjXuIPv4pviv:/K25eo5gU9Z9xN6wRcE6Qvq6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f6f17489178f48400e7898b9151cfc5_JaffaCakes118
Files
-
2f6f17489178f48400e7898b9151cfc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 11.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE