Behavioral task
behavioral1
Sample
e077b545f8d837c151e51b0b2568a351_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e077b545f8d837c151e51b0b2568a351_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e077b545f8d837c151e51b0b2568a351_JaffaCakes118
-
Size
519KB
-
MD5
e077b545f8d837c151e51b0b2568a351
-
SHA1
add4d4d024954f892bd08b57b47980e7ee7a5c9e
-
SHA256
b3524f51f9244ff7781fb5fb4353b07b7f296c6a96240ee30952992260d85015
-
SHA512
25073dc1cfd1c8469e9695042275a4437f2a40a02c2f5554a984ab94a85a1170e487af3130cef7e257f02d81f682f28f5ea55ccc21b92757683a8ca428c61de7
-
SSDEEP
6144:vx97Z2JfuqRo4GL0ntrFUajToJEMOVSzBaoyVagrzkXZrf67S:rZ2Jf5EL0fUa4J1Ow4oyVbzkXZDL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e077b545f8d837c151e51b0b2568a351_JaffaCakes118
Files
-
e077b545f8d837c151e51b0b2568a351_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE