Behavioral task
behavioral1
Sample
e1d3e0a178b6956b9decc21065df19ca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1d3e0a178b6956b9decc21065df19ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1d3e0a178b6956b9decc21065df19ca_JaffaCakes118
-
Size
390KB
-
MD5
e1d3e0a178b6956b9decc21065df19ca
-
SHA1
b61199c2cc31b8c0e72c6ab08cbc23b083974dc9
-
SHA256
b7958bb7defdea322b757f009d5f7eaaa5da49752aaeb77313ee108763b26e59
-
SHA512
c3c668bcd806cf212a59b088529a8923954459b8268e62b7f7e089c698b982434b9c8b43f937708e335c6c7e404d08cd95978467bff4c59683c7502d61284140
-
SSDEEP
3072:1hrpI5bLOXRd2qrQrR+ATcxGOgIQB8oX9LjN8oDQS3HpcvPMGbXEUb/mTWQBhXvu:1zIJLOSbDOAHC3MOEU8ibnhPaaR/tr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d3e0a178b6956b9decc21065df19ca_JaffaCakes118
Files
-
e1d3e0a178b6956b9decc21065df19ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE