Behavioral task
behavioral1
Sample
2aff209a89e81c0971baab32fc583c1a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2aff209a89e81c0971baab32fc583c1a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2aff209a89e81c0971baab32fc583c1a_JaffaCakes118
-
Size
813KB
-
MD5
2aff209a89e81c0971baab32fc583c1a
-
SHA1
9a005741f3ac8c9934bfa4881156f30a2e613353
-
SHA256
549f88f03bcbf894be83c38721b86e440945a72a19d58f1375f429342077ea4c
-
SHA512
7a9dcf329900c6d80a2a2f98e1d10c6eb8233152f56ff8734cf0e26eb80bdc0dfe3a85352a6d0943e5982b3f9c5ecc79cd026fc5793441e32f28f0f4a621cf1d
-
SSDEEP
12288:jt0VPFfsKAkrbPlXhHANUTNqmkadHANUTNS:SFksb1AmkaE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aff209a89e81c0971baab32fc583c1a_JaffaCakes118
Files
-
2aff209a89e81c0971baab32fc583c1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE