Behavioral task
behavioral1
Sample
e125cc7d141d40ec6f7ddb9f4c53ff21_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e125cc7d141d40ec6f7ddb9f4c53ff21_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e125cc7d141d40ec6f7ddb9f4c53ff21_JaffaCakes118
-
Size
133KB
-
MD5
e125cc7d141d40ec6f7ddb9f4c53ff21
-
SHA1
14959c2539880a70364197bf7a02b46a7f8fdec0
-
SHA256
036e953c3038261f5db3c68f8dae392887865c92e20fe9d5a26e953b17406008
-
SHA512
466799366447241c0de345a82015767360603c9461a3b5a0d73a887d7681eaf63f10c2f9aff1141dd26d6fffa322404df9bac6deb2d635e6a958e2bfae5929b7
-
SSDEEP
3072:UYjU8cQlv7rTqS9QDgI7A25TvNmqwJ4v56WmEpaa3qn1XLTgOVKCo3w4RGhQ:MfS7Fas215hc/Ea3Zog4R+Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e125cc7d141d40ec6f7ddb9f4c53ff21_JaffaCakes118
Files
-
e125cc7d141d40ec6f7ddb9f4c53ff21_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE