Behavioral task
behavioral1
Sample
2f531c846d28799829a1485e3fa49273_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f531c846d28799829a1485e3fa49273_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f531c846d28799829a1485e3fa49273_JaffaCakes118
-
Size
212KB
-
MD5
2f531c846d28799829a1485e3fa49273
-
SHA1
ebc3546c5b7de09318ed45e07b2be6527378ccbe
-
SHA256
780a880fd1583f52e683caea3b152a7e29c38f0e8a6f86c64e0dbc950edc25cd
-
SHA512
5c5f9cb6438e24bc9b30c4705895b40aee73f69b66e75c5cfef2da37efefd66441320d87f67bb5d76a76e48de3a20174a87d69e4422661cceb98b9f800ab63e2
-
SSDEEP
6144:4kIyPRCEw3OBbJGp+zJtdni8s3/sDH29:laEw+bEp+zR/SEH29
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f531c846d28799829a1485e3fa49273_JaffaCakes118
Files
-
2f531c846d28799829a1485e3fa49273_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE