Behavioral task
behavioral1
Sample
e2536634b884c97dff80df1a53d80ecb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2536634b884c97dff80df1a53d80ecb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e2536634b884c97dff80df1a53d80ecb_JaffaCakes118
-
Size
1.3MB
-
MD5
e2536634b884c97dff80df1a53d80ecb
-
SHA1
b7126e8f52a35e5cf29b70be25ce5de460f4a22d
-
SHA256
18341cc8e6caca2976802120a3dbaf0c44af84a340a3e0696616b21c898a3962
-
SHA512
02c50e256b8e43deca710fad3ba248e11024d2158ec3cc59717ea233dfd424b5fc5ab57eb91ef9c2840076b326a6d92a29cc10bcb0bae511354a62ed673d7309
-
SSDEEP
24576:Y4ecK0rCWSTbvCUXYUkZil3tR2u0WNoSmp1H8kTZPTCP3e0uvG:Y4a0rCWSfXJkZiltgc9E1ckTZPToO0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2536634b884c97dff80df1a53d80ecb_JaffaCakes118
Files
-
e2536634b884c97dff80df1a53d80ecb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE