Behavioral task
behavioral1
Sample
e0ea03ca0dee1ef62ed17fc81e84dd46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0ea03ca0dee1ef62ed17fc81e84dd46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0ea03ca0dee1ef62ed17fc81e84dd46_JaffaCakes118
-
Size
5KB
-
MD5
e0ea03ca0dee1ef62ed17fc81e84dd46
-
SHA1
c3ad5a13c36c61c6aeea6408b3e71dcbdcf14a42
-
SHA256
d021de0f7607fecf525cdc35978ed4db535beeef42440dae5fa43666f07adee4
-
SHA512
cb000a6f0f8bbddac16c69523d5c1c3f34d8cf369c03af448cad077c4cc558b1622ea0ddadcc8da17b9b7498487986dfbed3ebbd223fd2a5410526aa906f1901
-
SSDEEP
96:86zsi8EbuAMo4tBf3DGBpwlDJYJ5JG2ZJa17xHzELYjyjZ5jMel:3sfEbBMo4thDKpgJYJvTaENt5jD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ea03ca0dee1ef62ed17fc81e84dd46_JaffaCakes118
Files
-
e0ea03ca0dee1ef62ed17fc81e84dd46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE