Behavioral task
behavioral1
Sample
2fdd3ee887efe004643eaa3b9ea58a97_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fdd3ee887efe004643eaa3b9ea58a97_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fdd3ee887efe004643eaa3b9ea58a97_JaffaCakes118
-
Size
698KB
-
MD5
2fdd3ee887efe004643eaa3b9ea58a97
-
SHA1
82b4fb307c799a4a30968f4741ee56f08fd39d06
-
SHA256
b4d68dd6236413b73cc6d01b4c68ff98350a202100cd614181629f624b02c7db
-
SHA512
34ed49bb723503846780449c1a4ce4f2f350c8af478246f9473e7c63c0677526a8484f2426d0b89502ec53dc11d9c12c81e577b502e322b28e0d3ed33a1c704e
-
SSDEEP
6144:SfejN9vmC7Xv+/2+CZL7Qneo/xqHOW4eLXjBJmfae8v/OmjVVr+RDjBmVA:IereC7/+/2+CZRUYOWdTBS2vmeVVrQPp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fdd3ee887efe004643eaa3b9ea58a97_JaffaCakes118
Files
-
2fdd3ee887efe004643eaa3b9ea58a97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE