Behavioral task
behavioral1
Sample
2837d1f096434ec10931befc350146f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2837d1f096434ec10931befc350146f6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2837d1f096434ec10931befc350146f6_JaffaCakes118
-
Size
549KB
-
MD5
2837d1f096434ec10931befc350146f6
-
SHA1
7827cc80f5e6f27862ac2c9404ab6d435ec7bb70
-
SHA256
e67142e58a5e4cbe3c4a229f94dcf66327a8f35239b54d3a3203650550ae9ce6
-
SHA512
0f7d9c9774ef840dba5064b40d972a384a53e9025beb2c9de831adaa2d38c47af733fa3e77f2dac0fcc9bd47b64f6057d3d78cde7a353aace7479f602cc825c5
-
SSDEEP
12288:fhpmuOtohuJqvs60yDfpmq+UGH1bU43hAb63KMed:fhX4bryDhmXH3Sb6Cd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2837d1f096434ec10931befc350146f6_JaffaCakes118
Files
-
2837d1f096434ec10931befc350146f6_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX3s Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE