Behavioral task
behavioral1
Sample
e106505dfc108c372ef3302e600a94e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e106505dfc108c372ef3302e600a94e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e106505dfc108c372ef3302e600a94e4_JaffaCakes118
-
Size
543KB
-
MD5
e106505dfc108c372ef3302e600a94e4
-
SHA1
5c7ad47d2d6878ebc1a9ea368a8c11962de75b3a
-
SHA256
84bff71d2e5ced1bbb85df103a4a7df19473a81e6ab4582107866a7ec81aaa83
-
SHA512
f9524ffc9a67009136628b14150b85a3a4badf080491bb7bb2f3fd8f287f053a4c697ab1548d9b65b0b2235e34dfc109ae65472ab17f1aeeafa37e49b7a58e4b
-
SSDEEP
6144:Nm8tSjMcCFgjGFF2OpG1pmyi1jHetjJDIu8ubn7ZXi1vSnCUCnfwC0g:NmBegjGFrg1mqZXQqCUUfyg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e106505dfc108c372ef3302e600a94e4_JaffaCakes118
Files
-
e106505dfc108c372ef3302e600a94e4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE