Behavioral task
behavioral1
Sample
e7b61f21cdb12f82b408bb21ee15bce6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7b61f21cdb12f82b408bb21ee15bce6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7b61f21cdb12f82b408bb21ee15bce6_JaffaCakes118
-
Size
73KB
-
MD5
e7b61f21cdb12f82b408bb21ee15bce6
-
SHA1
d55088a51ce5c2b6c7b1258319410a64f92998c7
-
SHA256
ad4a1e66575b5d6d3bdfa0085ace0802437d12761f6e1f80693d96f9535313ab
-
SHA512
105b7878cc49be388a0b624d0cd99f81efe96b121c9d19ac7810add5ab7b4a5af90bd1b73903cb9f3b897222318d692314c5c926f6df0af80c55cb2bb83e95fc
-
SSDEEP
1536:Q6UbFPn1D7BgPG3oTs4VgvzYC0r5/0Lsc1xC2HrAJb:zUbN1DtgPG8gvzYF18Lsc1EIs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b61f21cdb12f82b408bb21ee15bce6_JaffaCakes118
Files
-
e7b61f21cdb12f82b408bb21ee15bce6_JaffaCakes118.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE