Behavioral task
behavioral1
Sample
e7b6351f9c3dbad64d3061905564a3e9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7b6351f9c3dbad64d3061905564a3e9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7b6351f9c3dbad64d3061905564a3e9_JaffaCakes118
-
Size
49KB
-
MD5
e7b6351f9c3dbad64d3061905564a3e9
-
SHA1
7f25915ceac23e8a55ec0c620b2d717766cff1d0
-
SHA256
84f38a48913b05167f1ed8e4edfdb958f8ecfd43ee546f568fa20233f9b43b62
-
SHA512
3cda8135e4b5459925be6c1df4f54e79ca9408e64bbe896e0d57f50917a82296ba8f02013b33e7960687045ff0fa3b4294b580396a1c3e293a72ce8c42c5230e
-
SSDEEP
1536:PGLczW+X9QQeINTCnLzrlNpsNLqNrI4MLxinouy8:EsW+XiQ5oHWgMLgout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b6351f9c3dbad64d3061905564a3e9_JaffaCakes118
Files
-
e7b6351f9c3dbad64d3061905564a3e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE