Behavioral task
behavioral1
Sample
2a9b21c019e755e7d023aac5db492f94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a9b21c019e755e7d023aac5db492f94_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a9b21c019e755e7d023aac5db492f94_JaffaCakes118
-
Size
10KB
-
MD5
2a9b21c019e755e7d023aac5db492f94
-
SHA1
a0364c7010993bf1df4ee7bd3a6535ab59e6182d
-
SHA256
ed91a05acffee69d5f3bf1c65467a9eb65290ee107e8cd092205b7ada2402273
-
SHA512
934985b4c4cac0e0ce2acac66428eb5de97d79891b3834eebf4d609e433b96c204c6f913224cb7f04eb1099208d277fc5e2c170dafe550690265bfcb68afef0e
-
SSDEEP
192:h+/0D2YevXLfAc8XC1RITtrx7WXXHuDpkLEqWdfnQDWE:Y/2Pe/LH8XC1STFx7EXLIqGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a9b21c019e755e7d023aac5db492f94_JaffaCakes118
Files
-
2a9b21c019e755e7d023aac5db492f94_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
UPX0 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE