Behavioral task
behavioral1
Sample
e87adff8e9c77fe1fa8c068ee8bf0576_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e87adff8e9c77fe1fa8c068ee8bf0576_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e87adff8e9c77fe1fa8c068ee8bf0576_JaffaCakes118
-
Size
5KB
-
MD5
e87adff8e9c77fe1fa8c068ee8bf0576
-
SHA1
7d2ce3628c23fe2b5340a12aea9d85076d8d28fb
-
SHA256
e7af6f2ffae52cc927a81b2e7394ba36bdc21bad163cc5ba2413f6de979f8c6a
-
SHA512
b560d2e04887852346d6e8e51fd2a2a1f933867ba805de87afc013455250660ed7111a869fa76ffb4f5ba81d278e6bb3c091ab483b11a871d38c61e9df6299b3
-
SSDEEP
96:sJ+pHOosvkxu1ZLZQ0OLlQ2JtZAlomOheBEreqQj9yznhijxxttmUtml:sJeOoIkmZLu0MtZA+uae19yVijxJm2ml
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e87adff8e9c77fe1fa8c068ee8bf0576_JaffaCakes118
Files
-
e87adff8e9c77fe1fa8c068ee8bf0576_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE