Behavioral task
behavioral1
Sample
e8fb393475e8c5a8d09224cd25c4ed57_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8fb393475e8c5a8d09224cd25c4ed57_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8fb393475e8c5a8d09224cd25c4ed57_JaffaCakes118
-
Size
1.5MB
-
MD5
e8fb393475e8c5a8d09224cd25c4ed57
-
SHA1
cf5c80d892d262fac702244865681f1ca0914866
-
SHA256
a653a352ba734fbc946ef8cddccb9fda0a24483842750e2041c87dfdc7d2765c
-
SHA512
2f68405bf8fc94e56eb11ec962b33be37e4a1b5b06d5470e74ec3286c569359947e93ca963b251fd1f4c8aeb2592487b6a4b9e9a1cbb04c6fbe4f5c335ac0857
-
SSDEEP
24576:hp41XPhpOMQZjyP6St0x9H+aFL/cjukL2G/4bQiJKxkF7Wl5NqkoEcjukL2Y:hp41XPhpObZ2P6St0xYaFL/cakL74Mid
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8fb393475e8c5a8d09224cd25c4ed57_JaffaCakes118
Files
-
e8fb393475e8c5a8d09224cd25c4ed57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE