Behavioral task
behavioral1
Sample
2d1b12bb0d493677d6d7a4fd84b6e4f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d1b12bb0d493677d6d7a4fd84b6e4f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d1b12bb0d493677d6d7a4fd84b6e4f5_JaffaCakes118
-
Size
96KB
-
MD5
2d1b12bb0d493677d6d7a4fd84b6e4f5
-
SHA1
16c7204f1482ce5de850fa9b635cbeee3f56aba8
-
SHA256
59a151380710b6a9287f6c2d76a9125051cd94e425458f1ecb187c341abd95a1
-
SHA512
35a888b1b295f4e6bfc543e5b4799a48446a28872425d6eecc73807c4829fa1768b57e8237a2a78f05b6305c0a4026df67eea02b44b8bd835bd61a04d7f005f5
-
SSDEEP
3072:sr3KcWmjRrzS5niM5PP/cMIPxIEPm0a6nJ:/pni6/QPxIE+0a6J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1b12bb0d493677d6d7a4fd84b6e4f5_JaffaCakes118
Files
-
2d1b12bb0d493677d6d7a4fd84b6e4f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE