Behavioral task
behavioral1
Sample
2fc83364864c20258d39079c3b5087ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fc83364864c20258d39079c3b5087ee_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fc83364864c20258d39079c3b5087ee_JaffaCakes118
-
Size
58KB
-
MD5
2fc83364864c20258d39079c3b5087ee
-
SHA1
c95dc8ef2422dfe5e8d482568d39c7ab4b315f63
-
SHA256
bc16c6983d3c6c92d4824e75e1d66d43135adfbafe8e9ce32917e2cb1a73305f
-
SHA512
2b6fb6c4629b7d87c597f478b99ae5c26d5db514a1a95af163cf4b4852e62f2761f800e5d51500fb162fa9999f6b0ba27811d2475894f7cca8c075a8d09111f1
-
SSDEEP
1536:yi+4Z/vut/xlVBzrZlVmdX0ae5f5T78TsujJDpn:yi+4Z3oLVdBmtBcOTs+tn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc83364864c20258d39079c3b5087ee_JaffaCakes118
Files
-
2fc83364864c20258d39079c3b5087ee_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE