Behavioral task
behavioral1
Sample
e8cb025d46662f2ef4d48082cd35352a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e8cb025d46662f2ef4d48082cd35352a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8cb025d46662f2ef4d48082cd35352a_JaffaCakes118
-
Size
133KB
-
MD5
e8cb025d46662f2ef4d48082cd35352a
-
SHA1
98006405150bb55d8a7f27dae01f9431a433a1ca
-
SHA256
18bbb357b540b5e681d8dd38e92b7adcef5a109b8e53fe3601a3362c51c914bd
-
SHA512
a9e64d9f6be66a5e60b9ba3215e4d557ae1504cf939ce8f65081eee95d41299b6a228747955e87fae8d431799a6271c5c36e8a454e18344edebc8f55ddde00b1
-
SSDEEP
3072:vUS7ICjDfgs8Isg5E1XfA5DulSCk7ezh0Yw2Nv382hnmITPCFQ:vUS7xDfpBsgf1up1zh7w32hnvzCFQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8cb025d46662f2ef4d48082cd35352a_JaffaCakes118
Files
-
e8cb025d46662f2ef4d48082cd35352a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE