Behavioral task
behavioral1
Sample
2f5f238a763ec7990ff5b0b18249f940_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f5f238a763ec7990ff5b0b18249f940_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f5f238a763ec7990ff5b0b18249f940_JaffaCakes118
-
Size
29KB
-
MD5
2f5f238a763ec7990ff5b0b18249f940
-
SHA1
356d9743fcc8f8f0a0f987e41688b28a639c24a1
-
SHA256
2f05936a1bab7c744582a735fa0860a8161e8925bed33f21b5548f0b37951397
-
SHA512
e75c298cbe918d2e29c760ce75d90cc608382e9e264d7fef888236622cc4d6f7a4ba2c3cbb7dafc1d28ae101709a3b499258b0188d8f190eb50af062299ad386
-
SSDEEP
768:a0T3qeJQGfWkC6HneTk8pzS74YH3b3jijZqkr:a+r60W6YpynH3Kgkr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f5f238a763ec7990ff5b0b18249f940_JaffaCakes118
Files
-
2f5f238a763ec7990ff5b0b18249f940_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE