Behavioral task
behavioral1
Sample
2fe406b53509d7adbb7fff19fe24c3f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fe406b53509d7adbb7fff19fe24c3f6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fe406b53509d7adbb7fff19fe24c3f6_JaffaCakes118
-
Size
172KB
-
MD5
2fe406b53509d7adbb7fff19fe24c3f6
-
SHA1
95894b1b75d9c786f5d3a506477032f650a2b722
-
SHA256
0ddbea6ea7939e1fedd5c2dc2a00bca5afcfd71c04ae206917d7750a71a9c93e
-
SHA512
5ee7faa16e78e79762f99cd18acc4c18ea791f69a3dc07f7404272ba2f3ab36deda6fc350c009718f27153bfdfa7af4395f0d95e34425723696e897f6df69b6e
-
SSDEEP
384:u0Pk4DlCo0+/AGa7enkZI9vmw3BfHJnymH9kH:zDlCo00kMmE9yK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fe406b53509d7adbb7fff19fe24c3f6_JaffaCakes118
Files
-
2fe406b53509d7adbb7fff19fe24c3f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE