Behavioral task
behavioral1
Sample
e06e94ca56a5bdde6a26ed5bb871aa25_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06e94ca56a5bdde6a26ed5bb871aa25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e06e94ca56a5bdde6a26ed5bb871aa25_JaffaCakes118
-
Size
6KB
-
MD5
e06e94ca56a5bdde6a26ed5bb871aa25
-
SHA1
523cf804290e812ffc5786fb51b21de633cfe9cd
-
SHA256
46ce79f61770e30b3bf6ba9c45ac1838f4e547d3a22736b309b7f93a091acbac
-
SHA512
7989eca2e2a75c0788b4214c15942132d5b1dd8e0b1d5282e3e2a9d0f5cc63f4bfc104cd17d42e3a8ecfcddb1cab865cbe83f845fce44f947e5d2852bc8ab97f
-
SSDEEP
192:3shFPDKAmGCBmUQFKSbdhDWV5hFOnLOrpw:8hFPD9mG46KSphDWX44G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06e94ca56a5bdde6a26ed5bb871aa25_JaffaCakes118
Files
-
e06e94ca56a5bdde6a26ed5bb871aa25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE