Behavioral task
behavioral1
Sample
2ad3c83819c3730fad27b5fd0d46470b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ad3c83819c3730fad27b5fd0d46470b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ad3c83819c3730fad27b5fd0d46470b_JaffaCakes118
-
Size
139KB
-
MD5
2ad3c83819c3730fad27b5fd0d46470b
-
SHA1
101834e1a09afc9ae36586c11f4d9383d167ce48
-
SHA256
7e7fd0641cbc40c0d662fe1deb1b7a0909e767d36fa37c7cffef339a10da404b
-
SHA512
d5fe89a7f64e7daa36bbcd313b02ed178ebf88c28af03384fde7a731df6a7f7033fae4c4817bf6672807e0be0b99c3034101737b6f5ddbf116c0d292079534cc
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ad3c83819c3730fad27b5fd0d46470b_JaffaCakes118
Files
-
2ad3c83819c3730fad27b5fd0d46470b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE