Behavioral task
behavioral1
Sample
e0c99fe1d7dfac6a21242dd8b1f02722_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e0c99fe1d7dfac6a21242dd8b1f02722_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0c99fe1d7dfac6a21242dd8b1f02722_JaffaCakes118
-
Size
404KB
-
MD5
e0c99fe1d7dfac6a21242dd8b1f02722
-
SHA1
25d95e18140320094367498690e3d9ad669d509c
-
SHA256
973db8b8bb409200320f2cb3aeee1b627610b3716c00a9d21ac2da5a64d1c802
-
SHA512
c7a1672b899801e6b3846a9d7f22b82c0bbf46f1185c8a12f6689a3b33956d1cf027194a2c5385f4bb8c4b4135aeb055b7ffd3b91c8a22cb0e4e0023bb1499fc
-
SSDEEP
6144:iRkeuC7K18OCTkPL6AO3Rj4goibvEbq3uOjCDexZB63zMCgP60/ftOqQ:v5COjCIPmpRjdoigbUvO6TORgU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c99fe1d7dfac6a21242dd8b1f02722_JaffaCakes118
Files
-
e0c99fe1d7dfac6a21242dd8b1f02722_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE