Behavioral task
behavioral1
Sample
e2ae2e85d9919108aa7e83bc0aed42ac_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2ae2e85d9919108aa7e83bc0aed42ac_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e2ae2e85d9919108aa7e83bc0aed42ac_JaffaCakes118
-
Size
5.5MB
-
MD5
e2ae2e85d9919108aa7e83bc0aed42ac
-
SHA1
4c8e0131c5570bdf2b045ce40addce543546a157
-
SHA256
1f18070d0f237cdf8ecfbbab5427aefe6d97338347aee6601bfb1727358b6ac0
-
SHA512
305010ed26c68da30b8f5650a9fa4d37ff9bafdf73e3bff7d9a6e7a01f809eded6b449ca0314df522990ee0e412fe4124ce4d6e4ad059bc25660b48c836677d6
-
SSDEEP
49152:IT7C4RcAaV8L4WRpVJ1RudOBDCfmkg1+sdjay3vRmCFOGNj8mW4JH53R+wVG+l0P:sEcjZp35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2ae2e85d9919108aa7e83bc0aed42ac_JaffaCakes118
Files
-
e2ae2e85d9919108aa7e83bc0aed42ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE