Behavioral task
behavioral1
Sample
e742abbb3ea8241092f888baf940f15a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e742abbb3ea8241092f888baf940f15a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e742abbb3ea8241092f888baf940f15a_JaffaCakes118
-
Size
483KB
-
MD5
e742abbb3ea8241092f888baf940f15a
-
SHA1
9a8b7f2633c26d715b6cc393bad44caaf84cafc3
-
SHA256
a373b368e7a567b9d9a3578ad6e7ebff5234dd6a836ea71ea67cb2f546e110b8
-
SHA512
3edc92e89b55a49ccbdd7c383249541cee2a7ccc396117d6eb34fbbcd3c567ff8d513867b4cf70dc25850ed6d39d99eb5a6ebb6635110e78091986d90a7141ec
-
SSDEEP
12288:/SN+I3s8mQEnSluOBBqr07qZ9oY5ByzbjlS1c/U:/ms8mfntOar0+wwJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e742abbb3ea8241092f888baf940f15a_JaffaCakes118
Files
-
e742abbb3ea8241092f888baf940f15a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE