Behavioral task
behavioral1
Sample
2c748a26a444b1847a19f83e4c85a8a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c748a26a444b1847a19f83e4c85a8a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c748a26a444b1847a19f83e4c85a8a9_JaffaCakes118
-
Size
189KB
-
MD5
2c748a26a444b1847a19f83e4c85a8a9
-
SHA1
4935a54606a4f54954547f25455bd931b36f1c09
-
SHA256
b338541179a72228a7cb4cc6e5a206d2537ca59908c55476905a5107aa772292
-
SHA512
62bf6599430bc68aac2edad9a6b308bf49d3514f1fc498440b3046037929bc1a8b0ac6c8754978e5857dd13c8ab202ff5181b9c13dc589cd3468e5828053680a
-
SSDEEP
3072:OLVssEI0y2gzclc4KUzkuuTjzjqXmQRMZwIk1l18P1elUP/2xjoGJ1zRWJuRjxn7:OheIbolc4KU5uTjzjczRM2v138P1NPeb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c748a26a444b1847a19f83e4c85a8a9_JaffaCakes118
Files
-
2c748a26a444b1847a19f83e4c85a8a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE