Behavioral task
behavioral1
Sample
e8d95995c6fa1d0d2d2befb3a9d3e0a8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e8d95995c6fa1d0d2d2befb3a9d3e0a8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8d95995c6fa1d0d2d2befb3a9d3e0a8_JaffaCakes118
-
Size
80KB
-
MD5
e8d95995c6fa1d0d2d2befb3a9d3e0a8
-
SHA1
c5b70fe4307f0283cd207e5aed65e27b0f048590
-
SHA256
3844ae44908fe506d6217fa36bf23517e057b96472867c140da435a5dce07017
-
SHA512
5dbf19177b0e99980cc860d17f49b2f8d2907208056cc91dc7bd83e3717c6b27dc8c4b760bc96d6ab77423a9cc61ac089ee8aa91aa968a75dbd34c3c6d1f22e7
-
SSDEEP
1536:zGTu6NSGMbOo731GwVCTxL84mrjhybWDVWVy4iTY0ywqy5vtC38oPIuppCPY3hQL:Ou6NSNJ31JVCTxLhideVyfk0yyehYwxa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8d95995c6fa1d0d2d2befb3a9d3e0a8_JaffaCakes118
Files
-
e8d95995c6fa1d0d2d2befb3a9d3e0a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 792KB - Virtual size: 792KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 234KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE