Behavioral task
behavioral1
Sample
e2516a1f48447f8a310da946ecffe5bc_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e2516a1f48447f8a310da946ecffe5bc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e2516a1f48447f8a310da946ecffe5bc_JaffaCakes118
-
Size
1.8MB
-
MD5
e2516a1f48447f8a310da946ecffe5bc
-
SHA1
557635bdf0a827d8f7c1f94a617c52cd0ea14593
-
SHA256
6f83c652dc9caff31170dd3abead2a9b603d43fdacb8554c4f020b27a0c62727
-
SHA512
f011bfa40dd95725d89ff8e1c1d76db5f3766f94a8c9cd66e7a7b813d9e3a251b80cab5da3fac28a83960be1f114bb9d967135da4ada7aee6f5e3c6dac807a79
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqo:SCqm2Jpr0nNM7Dus7Nx5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2516a1f48447f8a310da946ecffe5bc_JaffaCakes118
Files
-
e2516a1f48447f8a310da946ecffe5bc_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE