Behavioral task
behavioral1
Sample
e0c1740beaad7c88f565e0b502363061_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e0c1740beaad7c88f565e0b502363061_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0c1740beaad7c88f565e0b502363061_JaffaCakes118
-
Size
23KB
-
MD5
e0c1740beaad7c88f565e0b502363061
-
SHA1
75cc5a1da541c08f2110f2a603d4cbb07b76e87b
-
SHA256
c16ebc97da29bc1a65a0fbb8787f853515fb76215c3fb9d6b0966b13fa12af06
-
SHA512
54afbf15877f2b665eb5da6ca86582f57a2d5f7dc82b6630fc7d1079354a9d867b5c4a4a38ae1b9843f9dc81ecb30dfc251a227ce743b95c7e6743e39298dbfb
-
SSDEEP
384:NomGtU49dqqYNr2I7+k2j1IkyoPv8/P3RhRv7085Asd0WKhC5Nf7wrhDL+HJ8Vvi:lG6YdCGj1Ikykv8/P3Rv0XiLv8rhsJ8U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c1740beaad7c88f565e0b502363061_JaffaCakes118
Files
-
e0c1740beaad7c88f565e0b502363061_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE