Behavioral task
behavioral1
Sample
2c2b81c87242ba785bb553abe4b200db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c2b81c87242ba785bb553abe4b200db_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c2b81c87242ba785bb553abe4b200db_JaffaCakes118
-
Size
859KB
-
MD5
2c2b81c87242ba785bb553abe4b200db
-
SHA1
5f0d855b440165f188f251e49e2968de7801452a
-
SHA256
b2ad9c1a4c0e627657ecc76ddf0d738a7cfb2d4ad433f049dbf53364e14487a4
-
SHA512
86ba346e2d8cb1ddee8b0f3e5eac7a714516b1242f2dbe13b1ae6e73b56934299478050a09f0c2d83ee86ea0bbae0bec3a6edecbda25ca9172ddeb938af329ed
-
SSDEEP
24576:UGwiEshToeWLiPY+Yj761TRnvP+DVPxGrz+9Tlx:UGwiEspKLVPatRv2YnGT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2b81c87242ba785bb553abe4b200db_JaffaCakes118
Files
-
2c2b81c87242ba785bb553abe4b200db_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 841KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE