Behavioral task
behavioral1
Sample
e9a309e50ae89bab583893fd8771edba_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9a309e50ae89bab583893fd8771edba_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9a309e50ae89bab583893fd8771edba_JaffaCakes118
-
Size
41KB
-
MD5
e9a309e50ae89bab583893fd8771edba
-
SHA1
08068db5c720dbbe59ca73e2c23e4099ee27c9ef
-
SHA256
372652c1deafad14419c8e4d64d72c2c277e2e9f98d7fbca8046f38f60baade5
-
SHA512
15b1bdb3b600ff433e7f8a252f1f598a5929edcd7fab2513dc8f503c0c1e1cfb95c7d961799510d73c89afaa43eb456d7d02fa173613d7405bcc2d42c2cedcfa
-
SSDEEP
768:f8GcEfjQSTrQagVS8JTMnaVG9X+3DJYPA9WfnmzEPWdXx7vnbcuyD7U:dJbwXTrVG9XPtnmhr7vnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9a309e50ae89bab583893fd8771edba_JaffaCakes118
Files
-
e9a309e50ae89bab583893fd8771edba_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE