Behavioral task
behavioral1
Sample
e85e6d3d5b2fc50ed4949d25e4a22126_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e85e6d3d5b2fc50ed4949d25e4a22126_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e85e6d3d5b2fc50ed4949d25e4a22126_JaffaCakes118
-
Size
151KB
-
MD5
e85e6d3d5b2fc50ed4949d25e4a22126
-
SHA1
488839ea1bb46cc4cddfe7e9d48b1451eb4ace37
-
SHA256
5866cfa133a44df54e9f9b29602d79ab9a285ce20b08b510924f7ea3391f608d
-
SHA512
ef011925e42d033818d4b3f6c35118924302364e276400812d342f001b7b11c3621549cf5765e4d1237a0df02bacc432c747c31d9a6fa76e10d3ec1454f161fb
-
SSDEEP
3072:7TN0LwH/hUmnWsYIcljpaHOIGxBHyBFgzdpJec/IMc0PSFRJvGoiXnos84q9gT6+:7TNxPWIc5sHt4B1wYPH8t9CJSyh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e85e6d3d5b2fc50ed4949d25e4a22126_JaffaCakes118
Files
-
e85e6d3d5b2fc50ed4949d25e4a22126_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE