Behavioral task
behavioral1
Sample
e74eb8b1fd29b6f6a2a9fe3473feb337_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e74eb8b1fd29b6f6a2a9fe3473feb337_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e74eb8b1fd29b6f6a2a9fe3473feb337_JaffaCakes118
-
Size
912KB
-
MD5
e74eb8b1fd29b6f6a2a9fe3473feb337
-
SHA1
4f243c6d0b86f2e9edf81afef9ff469bfe472680
-
SHA256
8e860f69fe2f597757d4e01214806fe4cb4f367542117b8bc96644d6f608aa79
-
SHA512
5fcae6b978e3b892d183e5be208f641977962352fb1563f6cc04a32268f2c76a455357f7ee8006fecf3bc7332dbaae0c09ab326aa8728b25e09b081b2371e1f1
-
SSDEEP
24576:pjWxe/KZvC8TPRlOlNQuqiGXHM+VXcp47NWTNdQuGYA:VQ4UC+PXCQuqiGT1o2WTcuGn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e74eb8b1fd29b6f6a2a9fe3473feb337_JaffaCakes118
Files
-
e74eb8b1fd29b6f6a2a9fe3473feb337_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 884KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE