Behavioral task
behavioral1
Sample
2a8cfdf4e64e4271ae44926cfa772817_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a8cfdf4e64e4271ae44926cfa772817_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a8cfdf4e64e4271ae44926cfa772817_JaffaCakes118
-
Size
610KB
-
MD5
2a8cfdf4e64e4271ae44926cfa772817
-
SHA1
2b89ec933f7388484611862b6a2db8f380e57e6a
-
SHA256
0646615e70e758bb6b22b0647f09905c75cda75e3146f22dc0241e106ed88273
-
SHA512
72abf770f0a93a530ac5dc1f4631e5793dba88dea5ef43eb5689c5fd18bd0837727f4ce25ce8f62e59a663b39952a29879b12acae8a50640661c9f7423f2b32a
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7cHANUTNhGj:jt0VPFfsKAkrbPl7cHANUTNhGj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8cfdf4e64e4271ae44926cfa772817_JaffaCakes118
Files
-
2a8cfdf4e64e4271ae44926cfa772817_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE