Behavioral task
behavioral1
Sample
e280196177d3baa3e5d30b3f4eb793da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e280196177d3baa3e5d30b3f4eb793da_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
e280196177d3baa3e5d30b3f4eb793da_JaffaCakes118
-
Size
163KB
-
MD5
e280196177d3baa3e5d30b3f4eb793da
-
SHA1
aee00dc6a524e320dee87a932be31d3a844af872
-
SHA256
fa19b8f9b89f0909e84beef7cf6b2880d73981140e6b1ec3e666000a45c63366
-
SHA512
229e67537bccaa69f6c395361f9c8c9ac369c8685ff071cf89e2df119a09e8ac232f5112f24fe8f22c9c80a94155ea9b91e6a0c00fa2df88b37f255617e2dc06
-
SSDEEP
768:WRKHMw5QKXsYcYlhbM1WquDEh1RxG6lNv/4Im/35a+2et5:WNw5oiZDgRxG6llgI+nt5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e280196177d3baa3e5d30b3f4eb793da_JaffaCakes118
Files
-
e280196177d3baa3e5d30b3f4eb793da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE