Behavioral task
behavioral1
Sample
e9c09aa68d9d90264c267a58cbae3baa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9c09aa68d9d90264c267a58cbae3baa_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e9c09aa68d9d90264c267a58cbae3baa_JaffaCakes118
-
Size
579KB
-
MD5
e9c09aa68d9d90264c267a58cbae3baa
-
SHA1
59f1bcf6979b8bba9bf353550fa29a799b8417bd
-
SHA256
068cb7513abaa05aff56a0732b5faae37e85bce5d383a87cfd881153e47f2335
-
SHA512
dd30b28462023a5befc3f5f28a2d8904980d1879153f78d0850ff27aa22a8f79e7de496e3fc27778713ce4d1d61053a242e68b473b0b016a8886168a6765de80
-
SSDEEP
12288:DUOycCPEyAgcmFcvkrI9rzEs0sxD+ibZD74Djhe4/DIEVuHJub7U2RBVJ:IOycpyAJTkEPEs0pibZ3ogeDI7Hkb7Bf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9c09aa68d9d90264c267a58cbae3baa_JaffaCakes118
Files
-
e9c09aa68d9d90264c267a58cbae3baa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 547KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE