Behavioral task
behavioral1
Sample
2f81d9bcb87851b4e512e7dae8231613_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f81d9bcb87851b4e512e7dae8231613_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f81d9bcb87851b4e512e7dae8231613_JaffaCakes118
-
Size
67KB
-
MD5
2f81d9bcb87851b4e512e7dae8231613
-
SHA1
c559068cab450609ffdf1d690fcb185e190e5444
-
SHA256
15f1f852bf73f7737b748d3b56b17ea9f9d6c1e05d870f90453a23312e1e5684
-
SHA512
3837e8966ff8d309f96ee8999e4fd1d5e0b52c81b2f7007d4543c2636b31bbf471d6ab6f19bbf3dcc0b1ecf00ab05cbca58484f02390aa1c33631b30428cd4b3
-
SSDEEP
768:J5UJs6eRraedWgn7VMLbbb+E3LDwMY32UP5wjnU7Bt018CCKU3UfnDArccvyPRW+:Ld/WFbj3LjKRwuBK63Iyf6ATwt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f81d9bcb87851b4e512e7dae8231613_JaffaCakes118
Files
-
2f81d9bcb87851b4e512e7dae8231613_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 689KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 587KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE