Behavioral task
behavioral1
Sample
2d5113b4736ca229d636b54c7ab5254e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d5113b4736ca229d636b54c7ab5254e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d5113b4736ca229d636b54c7ab5254e_JaffaCakes118
-
Size
214KB
-
MD5
2d5113b4736ca229d636b54c7ab5254e
-
SHA1
cb5b1a392357e2805f350e291dea8a25b00c563d
-
SHA256
b077fe53493c34d05a22390100ee77cb4b097a44b207e1d99fc68284a2a866e6
-
SHA512
54a7f0ec2a3daf768617a1057a27584b0af79390dc8423e4afc7a87d0277c6eb902c9bf11782febd1f72a356239a441f871387130dd2e94815b39b22b280c24f
-
SSDEEP
6144:lx1sDYNCJqE7Rh8Ej1WjtDidZyQkxPS+ISX:lx1sTqmh8eOtDnQkxa+I2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d5113b4736ca229d636b54c7ab5254e_JaffaCakes118
Files
-
2d5113b4736ca229d636b54c7ab5254e_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE