Behavioral task
behavioral1
Sample
2efed003d895f857fbf6698803e63b82_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2efed003d895f857fbf6698803e63b82_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2efed003d895f857fbf6698803e63b82_JaffaCakes118
-
Size
32KB
-
MD5
2efed003d895f857fbf6698803e63b82
-
SHA1
308bdc78bd7c72adc871149b805f682c47653ea2
-
SHA256
11cad30ddc42b92a2e510075ff9af82af6db251b539c68cecbadf992820d8ec7
-
SHA512
88fcd547ef9cd694bc4e600525d4f84c273ff21451a9970632f07af8386e32e2c1cd9a1573f7432651a6f742e1b3e63e73d5d2a82bc7477b74aec1e814bfacf2
-
SSDEEP
384:jOg+JpPHWHuofRokIB7XJbAWBprwteS7vm4Z2AB:jOg4p+HuoE5ZbAWBprIdjm4Z22
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2efed003d895f857fbf6698803e63b82_JaffaCakes118
Files
-
2efed003d895f857fbf6698803e63b82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE