Behavioral task
behavioral1
Sample
e7c5babcb0bd1ba52ee8dcd1a26e4445_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7c5babcb0bd1ba52ee8dcd1a26e4445_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7c5babcb0bd1ba52ee8dcd1a26e4445_JaffaCakes118
-
Size
128KB
-
MD5
e7c5babcb0bd1ba52ee8dcd1a26e4445
-
SHA1
78b77f908bb709df8061a65aa8717463dd6c6c4b
-
SHA256
e94286448885e4096b95809e57cd07e42d2450f279c42b70115d82339e979e58
-
SHA512
49a678b39384eede249c6aa5c80dbb5efc4c2e410f12ec2af976fcc7b873450462c5005a95e1a2340047823a6255629a7a4c8b16146c475a1f56b7f07ae16646
-
SSDEEP
1536:07A8NSNEQab6YJgrg9U142bZtX1zWOafxCP/sFWggbUZolh:07AAm26YJZ9UjbZx1GfxCs8ggoZol
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7c5babcb0bd1ba52ee8dcd1a26e4445_JaffaCakes118
Files
-
e7c5babcb0bd1ba52ee8dcd1a26e4445_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE