Behavioral task
behavioral1
Sample
e994e00cabbf59f44381d33722d65921_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e994e00cabbf59f44381d33722d65921_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e994e00cabbf59f44381d33722d65921_JaffaCakes118
-
Size
236KB
-
MD5
e994e00cabbf59f44381d33722d65921
-
SHA1
c2dce76b4ceea37dea93d78e88d47ed0fe2ab770
-
SHA256
71f71a53f672e318c25263d7c98f1bb88842d6a8ab9b0f856dbf724bb6da1fc9
-
SHA512
8f14c92fd31bbd015c25b41fbdfe9bad9f9533776e8200ed9afc4d1d7c3847853ff3affd5c821ce2b858897ad113e543cf3f9793408b2133c1dff4c0a527e60b
-
SSDEEP
6144:hGyGQNuWDI/B2/LjdKznQc/qcpbAFyANPcSL/Fv8:h3lNuWM2LI8cicpCBJO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e994e00cabbf59f44381d33722d65921_JaffaCakes118
Files
-
e994e00cabbf59f44381d33722d65921_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE