Behavioral task
behavioral1
Sample
e8fe8e414db89d186f3aff3023093186_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8fe8e414db89d186f3aff3023093186_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8fe8e414db89d186f3aff3023093186_JaffaCakes118
-
Size
50KB
-
MD5
e8fe8e414db89d186f3aff3023093186
-
SHA1
c7d82cb6bce6347b7dbf6ca85242eba0885913cc
-
SHA256
9b5ac26e6035d1175b2b8839d8fdd6f49610bd66e7d51b9ee078bee3474f689f
-
SHA512
a6a3a7252febe3f8bffc0eefa4657a728b6bcdf763b7706189a897796e9b12dc80b22cf9543b9b4f169d92bfc448b945ffe9143d890e21779afe6d55d25fbbcd
-
SSDEEP
768:PXAYCceIcG4x1EraYlofsB3kVvu1zyNakMAi9OSAtxdX+9nRaOd4fciLnbcuyD7k:tCVXGfrjofjvCzyMbc+RaVfxnouy8r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8fe8e414db89d186f3aff3023093186_JaffaCakes118
Files
-
e8fe8e414db89d186f3aff3023093186_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE