Behavioral task
behavioral1
Sample
2daf8192995e36c864ef20a40edc7495_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2daf8192995e36c864ef20a40edc7495_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2daf8192995e36c864ef20a40edc7495_JaffaCakes118
-
Size
95KB
-
MD5
2daf8192995e36c864ef20a40edc7495
-
SHA1
01e24a014b1c9829a5a421bb6d4170fe5d6b2fbe
-
SHA256
ffe524e3b58754a563340a4244198da838ee660419928ed9acefd0e2a1c49e12
-
SHA512
2f263d759e010ccfeac3db27b2ff43b7012bbbca698f8f51195e37f53682bbf3d9aa52cead13b0a67352e36821ed1508a579d422aa7f5f645d68cfb6837d209b
-
SSDEEP
1536:pskKNqRSQ911QzZ0z+EurTkW68CWtNa0hRAWXP/ay+23t6K+8ZBq2izFPtXv5y:ps9NUSKbeZUYPk4tNa6RBXPZ+8ZADzFC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2daf8192995e36c864ef20a40edc7495_JaffaCakes118
Files
-
2daf8192995e36c864ef20a40edc7495_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE