Behavioral task
behavioral1
Sample
e1488e6fb5b0b5804fddc665039637a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1488e6fb5b0b5804fddc665039637a9_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
e1488e6fb5b0b5804fddc665039637a9_JaffaCakes118
-
Size
387KB
-
MD5
e1488e6fb5b0b5804fddc665039637a9
-
SHA1
4050c56b49514a630f1e38cb76ccef047c1d6343
-
SHA256
e51ced411547a6e48bc817d26aaa3d84297fa2c6ee7941333e6bb5ce5d39ea77
-
SHA512
d383ea9263ea05e52a682e749014c925ba51675eed58837ccc9f1a396221827cfa24455f4dcbdd4c4ec286093d6f44200edb3f7ace1e3d4140fd077c833c09f0
-
SSDEEP
12288:3hAjUuvzIE1vCSkbFtHNiV4nsTICJbpR9:QU6x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1488e6fb5b0b5804fddc665039637a9_JaffaCakes118
Files
-
e1488e6fb5b0b5804fddc665039637a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE