Behavioral task
behavioral1
Sample
2d04673702dc05519e1dd857ef0d9751_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d04673702dc05519e1dd857ef0d9751_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d04673702dc05519e1dd857ef0d9751_JaffaCakes118
-
Size
88KB
-
MD5
2d04673702dc05519e1dd857ef0d9751
-
SHA1
b3bb7dc6c490a8194dbb8d895cdbe32b4a3b756e
-
SHA256
b24a9dd8101f415baacdbcc3fc1168cabc202f4012341b5dcc4eb0e87ae92863
-
SHA512
4fa730353871f8ead0100ec6f8de106689cf1fc5d75dee26441590c15a8ad8c0536e74e29f10fcc7eafb10e272ae80ec8723f4bd03729e41f85002d365b0b7a9
-
SSDEEP
1536:BB3L50nbIDZtNTnynTOQLfysKDCBB2TVAIFaOJWv3:jLKbI1njyTOQTysKSxIFa4Wf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d04673702dc05519e1dd857ef0d9751_JaffaCakes118
Files
-
2d04673702dc05519e1dd857ef0d9751_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 627KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE