Behavioral task
behavioral1
Sample
e0ab5e11adb662033245cc1e9fcdc1d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0ab5e11adb662033245cc1e9fcdc1d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0ab5e11adb662033245cc1e9fcdc1d8_JaffaCakes118
-
Size
385KB
-
MD5
e0ab5e11adb662033245cc1e9fcdc1d8
-
SHA1
1ebd65c7cfe65de386182d3712ec0e5d63f3f955
-
SHA256
69b0f81a02e9ebc7176a0c5dc31e4949aa853b37c49018aaf0d9580e0d9e8664
-
SHA512
a6fc258d7f691aa60253fb2f56c923856c5e99f91eb33806632c20454d0e037a239a7441d6f714b16705133d891a0ade73b4db9aa988e79d8ff659063512a8f0
-
SSDEEP
6144:/qni8NWfOeLRktHzbE+MCXYcEYCoS64rb+1:zcO6vNmUh4rb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ab5e11adb662033245cc1e9fcdc1d8_JaffaCakes118
Files
-
e0ab5e11adb662033245cc1e9fcdc1d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE