Behavioral task
behavioral1
Sample
e908830a1d709a71dd25736004e23239_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e908830a1d709a71dd25736004e23239_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e908830a1d709a71dd25736004e23239_JaffaCakes118
-
Size
2.9MB
-
MD5
e908830a1d709a71dd25736004e23239
-
SHA1
950ecab6a94bf1f95b339fcd189103f3370c052b
-
SHA256
3dc6c7fd46f54bf6527fcae0f02cc31ccb2aa8bf691f6968aa66c9d980c84cec
-
SHA512
af91d90ff974e5d5c485b71ee0ee36acfe6e8f74b8e27bfdccb27730a73e9219ef48e5c5bdded61f382ae1f360c931edae9d95f616038ef9e10e2fee7e3b4b69
-
SSDEEP
49152:+6f8NiaaerqD9sLpSXQmdogj/2fzPyckbmdzXhaxJpoxW4//2IJ:+X0CqWpgHugj+fjUb+XhalyWYn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e908830a1d709a71dd25736004e23239_JaffaCakes118
Files
-
e908830a1d709a71dd25736004e23239_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE