Behavioral task
behavioral1
Sample
e82ae43ec5ab630cece45cf19ff63c49_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e82ae43ec5ab630cece45cf19ff63c49_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e82ae43ec5ab630cece45cf19ff63c49_JaffaCakes118
-
Size
151KB
-
MD5
e82ae43ec5ab630cece45cf19ff63c49
-
SHA1
8317d56ee4017cbbc55279e09071f0fa6cd7789c
-
SHA256
00f8158cf3f00fbe0fe550babedbac503b0c32bf86fabc85dfbd61d89fd9c62a
-
SHA512
7b7e2e4ccf29de2866a489579c963302306a5c610dfd339527b3ee665e380ad5d19711c19dde1ec145003dc14a52861b71703690eb22e9b066cd808ef5790f29
-
SSDEEP
3072:XHECWMMbmP07m4gfh00VvM5Ll7Ya4j7TUDWuxmY96yUQrXgSwE5:Xk4qmp4MfvYiUSgmVYgZO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e82ae43ec5ab630cece45cf19ff63c49_JaffaCakes118
Files
-
e82ae43ec5ab630cece45cf19ff63c49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE