Behavioral task
behavioral1
Sample
e182ed017bf377f1208304d3a631e2f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e182ed017bf377f1208304d3a631e2f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e182ed017bf377f1208304d3a631e2f6_JaffaCakes118
-
Size
12KB
-
MD5
e182ed017bf377f1208304d3a631e2f6
-
SHA1
89fe7c2c493b3ded8630b2b564164c753b052ffd
-
SHA256
2f9428d6e2ced20bc7b72c97691b8f9d850578c12a0a6f82a8a1d4848fec8c6e
-
SHA512
059b0eab7c9faad03260408e37c1e8576c6709124f0257ff127024dabc7a86ca4fe35be2ada5ced43bd567f6cba5f40899472b86c3c99e857423c873d49e7fb7
-
SSDEEP
192:GnbGDi0Yf+3Fs4kAREV10wnOr4FBWUPb1BuG/3N7QmcyrJV33qUnXIBmvhw4OmAo:u0ZA+1dr6V10YOsDtB3xcytAaXRm44kH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e182ed017bf377f1208304d3a631e2f6_JaffaCakes118
Files
-
e182ed017bf377f1208304d3a631e2f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Shxm Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shxm Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE