Behavioral task
behavioral1
Sample
2d1fc0da5b5583c9d18038fe3c19e25f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d1fc0da5b5583c9d18038fe3c19e25f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d1fc0da5b5583c9d18038fe3c19e25f_JaffaCakes118
-
Size
14KB
-
MD5
2d1fc0da5b5583c9d18038fe3c19e25f
-
SHA1
e7f499678c406f6b2c0434b23083d1b249aee195
-
SHA256
9f2351d100213dee38e4151874c07293c3cb45bf9541ac853d3e30b28de7e616
-
SHA512
77ab9c1cb7ad6881d188ab78ae41f73e5dbf86f6fe295025f3009828b7c0226c74459266bc6a20644eb81682654e2c2990702d991db5272ac8d32a16827c1a8d
-
SSDEEP
192:m6ajd7Y0MbvFz9wmOh5X9tIHfaS4uUe2bdv4r7KALiY+jGoO4Futq7NY3/yIGalk:ml5Uhpqh5ttSM1PJwKgiY+2Rtq7NY36v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1fc0da5b5583c9d18038fe3c19e25f_JaffaCakes118
Files
-
2d1fc0da5b5583c9d18038fe3c19e25f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE