Behavioral task
behavioral1
Sample
2a13bd0106d60b477548d5028d316619_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a13bd0106d60b477548d5028d316619_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a13bd0106d60b477548d5028d316619_JaffaCakes118
-
Size
57KB
-
MD5
2a13bd0106d60b477548d5028d316619
-
SHA1
14296229bf802f986a325639cbac4c6824d7ca34
-
SHA256
4473b06caccd756a6d6d904eb0a284ef54fd99176db76139ace8d090537efc2a
-
SHA512
03f9a3c3bb095ce97bb17a3e1c5abe8e516992ab1bcac5ca23d9b244d367c26845b9366232e6b1b8777e4e48ee65796d91351d6c795c7defeb32b61a58572647
-
SSDEEP
768:bwdgqKcwtqWK2dm4E/4orv42r2PDI8/NCJEHneIrruBCWUm0Z/4EOq:bOqnPK2E//4kh8FCJGeuuBXl0/D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a13bd0106d60b477548d5028d316619_JaffaCakes118
Files
-
2a13bd0106d60b477548d5028d316619_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE