Behavioral task
behavioral1
Sample
e24ea17ff70dc02f0130c3fd593953ba_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e24ea17ff70dc02f0130c3fd593953ba_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e24ea17ff70dc02f0130c3fd593953ba_JaffaCakes118
-
Size
3.9MB
-
MD5
e24ea17ff70dc02f0130c3fd593953ba
-
SHA1
5a71c6daa2f89723b431da5afc1240b515b90320
-
SHA256
e329cef05286fb6b8e167f68b7d5db1b15096f46b0da13cd33d94dc3f818e5b0
-
SHA512
488b946a03381d9330220fc1d096a27f73c4623242dbc170416532642b8feb878ea50050f77951266ed9a914ead7e41aa3eac35fa77acb8bed6cdea287f4fbc7
-
SSDEEP
98304:rqdkqkkNBmbD2i7D3xkOxYwpKl9m6xhYueoZkXmckD2i7D3xkOxYwpKhGBouWUji:GGqnXmbh7FkNqKlQoGucDkh7FkNqKABu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e24ea17ff70dc02f0130c3fd593953ba_JaffaCakes118
Files
-
e24ea17ff70dc02f0130c3fd593953ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE