Behavioral task
behavioral1
Sample
2d24d71b434693c02aef53901724135d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d24d71b434693c02aef53901724135d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d24d71b434693c02aef53901724135d_JaffaCakes118
-
Size
129KB
-
MD5
2d24d71b434693c02aef53901724135d
-
SHA1
c514412ea4609f263e994ae3842c565f998e3e7b
-
SHA256
ba48c784b20d484ea1e6b6241a27286352e00abd84a619ec872f297990381877
-
SHA512
5083a1bb38daed2bb79d8e0f4818027bf1bd0d725101f8a28ac71cdcf6bbfa1ee1112fe42af9f6612add21454586a118cf6b115c7639bdf74c16832fa6ed2ccc
-
SSDEEP
3072:dJN2DJ/xiA516vDLt7DHxNmU/bD/rQIpTmz0:dJoD7iAfUTD/rQuTmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d24d71b434693c02aef53901724135d_JaffaCakes118
Files
-
2d24d71b434693c02aef53901724135d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE