Behavioral task
behavioral1
Sample
e23cc6813d3d1ea9ed78059ba1b8da43_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e23cc6813d3d1ea9ed78059ba1b8da43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e23cc6813d3d1ea9ed78059ba1b8da43_JaffaCakes118
-
Size
856KB
-
MD5
e23cc6813d3d1ea9ed78059ba1b8da43
-
SHA1
f4b440dfd907bab03e2c9fe52eee236921f88a9e
-
SHA256
3d6fba052fdfe760950d7eba9c9e073d05fcbabbbdd8132c907b7a68ab54e11e
-
SHA512
b01ca567d06978892862d3eeff09c43f7e6a0bd78bb4e80122a7e9df9c5cbb2e0a8f0c792481c3eadfda986be0ebd39bcee9e71006646eebadb1f07c3478dddd
-
SSDEEP
12288:yTiSkPAIUy7llzQBJx4shmbDst7QEotZzce7xK+CjH4TTMgyLzplOmhoGWbVWoS:yVkPAInbAzhLpGZzce7xKHYTTrijq5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e23cc6813d3d1ea9ed78059ba1b8da43_JaffaCakes118
Files
-
e23cc6813d3d1ea9ed78059ba1b8da43_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 838KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE