Behavioral task
behavioral1
Sample
e0ab7649a2cbcb6ae39e28d0120ea3c6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0ab7649a2cbcb6ae39e28d0120ea3c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0ab7649a2cbcb6ae39e28d0120ea3c6_JaffaCakes118
-
Size
139KB
-
MD5
e0ab7649a2cbcb6ae39e28d0120ea3c6
-
SHA1
c7cf033e7369f8483f5ea5e026f13d50fd98be2e
-
SHA256
430253cbdd1051e7758217a8ac2f4365a297e7a7f78a07db28f52b6edc04b451
-
SHA512
ed798938f9f9293600257c771fbc2b0d2f7568dac36605848bd05c9af2c7dc5716ccc7120c77fc131d99836baa5f6803824ca454e75bc568a12e7d81b34a7c5a
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ab7649a2cbcb6ae39e28d0120ea3c6_JaffaCakes118
Files
-
e0ab7649a2cbcb6ae39e28d0120ea3c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE