Behavioral task
behavioral1
Sample
2f897b85d5d5d01a7225df0811591c39_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f897b85d5d5d01a7225df0811591c39_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f897b85d5d5d01a7225df0811591c39_JaffaCakes118
-
Size
539KB
-
MD5
2f897b85d5d5d01a7225df0811591c39
-
SHA1
fa456abdb9802292742bddf80daece8c07316737
-
SHA256
22a8f5690aa361c5f7c648265a3d752710dcc6cc76a59d3fdae3c09c4e61604a
-
SHA512
ff9ab1b8a5a071601796c1e4fc2543d18472c6e3caf966546e014489770c32593052ad17b5d40f24539d7f2dd422cca8d27fabb12c1e0053aadaf94237baca6d
-
SSDEEP
12288:9hXFjJpL0EgYSP7hu5kC6Kj1qnbOUOA1zs6h:jqiSP70xknSUOA1ph
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f897b85d5d5d01a7225df0811591c39_JaffaCakes118
Files
-
2f897b85d5d5d01a7225df0811591c39_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE