Behavioral task
behavioral1
Sample
ce5ae9598d36c4a056933f85d3ec5841_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce5ae9598d36c4a056933f85d3ec5841_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce5ae9598d36c4a056933f85d3ec5841_JaffaCakes118
-
Size
19KB
-
MD5
ce5ae9598d36c4a056933f85d3ec5841
-
SHA1
717650771cbbee8895f30f4d222ae895a3cc8c03
-
SHA256
42d57622c527909cca9daeb2826ecf42ed65018032e2ee72571b0ba5c704f268
-
SHA512
8c12892e3fe675dbd9ef491511fc665c13c27aea34f945c2fdc16c3b4dfa3674598fd705b322659187cfc0921d20dbbbd86f7599e82bc499fe02ca7c6937193f
-
SSDEEP
384:BZgbb23Kj1P9Y2IYkhEog0sueFCD9pTVJoIAjkChVgHZAPc+diYYOdeIuM0w:BZgv2aj1P9Y2Khhg0sLQrsJU5mNjhdeA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce5ae9598d36c4a056933f85d3ec5841_JaffaCakes118
Files
-
ce5ae9598d36c4a056933f85d3ec5841_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE