Behavioral task
behavioral1
Sample
2989ff5c1c01d24f0ee68f716ed3d677_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2989ff5c1c01d24f0ee68f716ed3d677_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2989ff5c1c01d24f0ee68f716ed3d677_JaffaCakes118
-
Size
103KB
-
MD5
2989ff5c1c01d24f0ee68f716ed3d677
-
SHA1
8a169a3a3d1c5d5bfbcb4310a3e41d29a5fac746
-
SHA256
9e74d6f08901849cb27137ef7fd839e2d444f2f1b7d69131062a33fbf4e1eda1
-
SHA512
777782162be61cb55d4a8d1bb2e56830abd47755af7acca41a9555cecdc77b49803cf70bc2797f009d84c07524bb5f75ed38017593a21936538a7633118264d8
-
SSDEEP
3072:L3SHgc1KcsDCwxXEviZ9VeCqp6X54h6HysW3PrYS:GA+KcsDgizVeFp0PHyhd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2989ff5c1c01d24f0ee68f716ed3d677_JaffaCakes118
Files
-
2989ff5c1c01d24f0ee68f716ed3d677_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 419KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE