Behavioral task
behavioral1
Sample
e2b1b0fe71d2293d9b375a1aa40ba890_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2b1b0fe71d2293d9b375a1aa40ba890_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e2b1b0fe71d2293d9b375a1aa40ba890_JaffaCakes118
-
Size
202KB
-
MD5
e2b1b0fe71d2293d9b375a1aa40ba890
-
SHA1
7777815fca63dab85c0be0cd2b2d896e78104b08
-
SHA256
8a8af84c73c718ce1050c8ea02113c7c79b1e91f91f0e3c84e6efc6faaa901b3
-
SHA512
706208169af60da108654e3f4119de680eae5c7ed0bda79ffbf239106c41d49eb8460317124a79b97a51f9e50507dfc08310cc540a1240597e7c0d116d07e2b9
-
SSDEEP
6144:OZ3QVQEu1/Si1H0m+kWPzgBvOqx+yiIamoS:e3B1/Si1Um3zx+5PmoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2b1b0fe71d2293d9b375a1aa40ba890_JaffaCakes118
Files
-
e2b1b0fe71d2293d9b375a1aa40ba890_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE