Behavioral task
behavioral1
Sample
e93d9b2a306f6145688e94e8e8e33749_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e93d9b2a306f6145688e94e8e8e33749_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e93d9b2a306f6145688e94e8e8e33749_JaffaCakes118
-
Size
2.8MB
-
MD5
e93d9b2a306f6145688e94e8e8e33749
-
SHA1
cdf478cea281817274655b95842f71f700b838d7
-
SHA256
f0fe49a40ff0513dba574b1e672d156308700129872e93e42d3d456420861049
-
SHA512
048c3ea613258838aa29e20c6e0b83ae967a481474362ec7034aab708f2538e1a50e386f14153e47853d1c0f02b526cc7dfefd6b728d9a48f61a53adc5b4ce14
-
SSDEEP
24576:S6pQPxQ2Jyf2r5mZV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91/:SCqm2J5r03NM7Dus7Nx2kCqm2Jpr0nr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e93d9b2a306f6145688e94e8e8e33749_JaffaCakes118
Files
-
e93d9b2a306f6145688e94e8e8e33749_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE