Behavioral task
behavioral1
Sample
e29c9246dc05e6beed3aeaddf8fde7c1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e29c9246dc05e6beed3aeaddf8fde7c1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e29c9246dc05e6beed3aeaddf8fde7c1_JaffaCakes118
-
Size
303KB
-
MD5
e29c9246dc05e6beed3aeaddf8fde7c1
-
SHA1
1c56a92383bedec97baf3fddfb3d89b4341948ce
-
SHA256
279d956d728c38128491f9e52e249c09408766ded27b6b5f949d876ce9362ce2
-
SHA512
1965bb24580a40e691d71e8cfdf65bc3c1daa06d68e16358b96ac065281b27bda4fded24d43a1c466aac0211fadf57234698e3285f8f63a128a305fd1dedd904
-
SSDEEP
6144:sZl2PGvL134+xeLKLSHrpliFsAp1xVMl7axEf23Rg1rf+X:smPV+0LKLqrpliiAb7A7ak2G1rm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e29c9246dc05e6beed3aeaddf8fde7c1_JaffaCakes118
Files
-
e29c9246dc05e6beed3aeaddf8fde7c1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE