Behavioral task
behavioral1
Sample
e76b37ee291d2a23c343e4a6af93b456_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e76b37ee291d2a23c343e4a6af93b456_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e76b37ee291d2a23c343e4a6af93b456_JaffaCakes118
-
Size
2.5MB
-
MD5
e76b37ee291d2a23c343e4a6af93b456
-
SHA1
cadea29e799705d75100a8dcbac841a26e73d431
-
SHA256
cb6c6a53210d2bdca41d34a1364c5e73ad17f970dbe27d327c594fae19906802
-
SHA512
958cfdbd2203fd3eeab0ed17c2ad7b5e208c65741ce2d65f5235deb26322fe03d531fec29e10431d40028c4be2a57d538e936c1836ab9776e9c01a4e8885cd32
-
SSDEEP
49152:z4HYUCFQtgKyvvePt+EtxsFQhW2N74NH5HUyNRcUsCVOzet0:8ZCaQcsOd4HBUCczz9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e76b37ee291d2a23c343e4a6af93b456_JaffaCakes118
Files
-
e76b37ee291d2a23c343e4a6af93b456_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE