Behavioral task
behavioral1
Sample
e2abedfec4c58bcd112d046f7a339fb4_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e2abedfec4c58bcd112d046f7a339fb4_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e2abedfec4c58bcd112d046f7a339fb4_JaffaCakes118
-
Size
5KB
-
MD5
e2abedfec4c58bcd112d046f7a339fb4
-
SHA1
321932a09c7be791e1a0b1a7ee237ce067159674
-
SHA256
e0598854f197afe561a11e65e4ca60cdc8c5cfe9f9ecb504538cd8d73ce4b5ab
-
SHA512
e5bc45937279ba4d2a6a3fb9f8ec6f3525fa3205eb0f86a09a342a7a32afd05670b1cf96971bea15e0b9b23432c766c218ebf3cc31a7e083d2e72e493584bf1d
-
SSDEEP
96:BLweOTNMUkkwfmbvy00c5obUZRnzSAih5zSPxVPtOQ0mkMUr6v:VJS2kXbvp0c5MKRnOAihpYtEnU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2abedfec4c58bcd112d046f7a339fb4_JaffaCakes118
Files
-
e2abedfec4c58bcd112d046f7a339fb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE