Behavioral task
behavioral1
Sample
2f93adb86072d1b68410297f948e6107_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f93adb86072d1b68410297f948e6107_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2f93adb86072d1b68410297f948e6107_JaffaCakes118
-
Size
312KB
-
MD5
2f93adb86072d1b68410297f948e6107
-
SHA1
304c9a243128436dff04bbd478a5900d7676e94b
-
SHA256
98a9c2af79447ce6418bc703ae74fd96068440743101b8c047e92d869c945810
-
SHA512
960668917e035e94d70ec58a43eb9a7f6977f8b65ad939e244594169b08c1fb4746910476dfabf8924f24591113a96aeaabe7a3d759484b5b4813e1f13cab215
-
SSDEEP
6144:a7oPfZVJfbeHSy8VJLw9s6TCChoiICpedy3mLKcAL7+HjF73K:coPhfigJaTBhoNwe8CR3K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f93adb86072d1b68410297f948e6107_JaffaCakes118
Files
-
2f93adb86072d1b68410297f948e6107_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 519KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE