Behavioral task
behavioral1
Sample
e9e825e0b98d027a6d3a33328d1e4939_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9e825e0b98d027a6d3a33328d1e4939_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9e825e0b98d027a6d3a33328d1e4939_JaffaCakes118
-
Size
469KB
-
MD5
e9e825e0b98d027a6d3a33328d1e4939
-
SHA1
b1831d52b244038755842cd8970cc86b1e83d107
-
SHA256
60320b0dd0d35d45a0f87a99ee96c7f017c14f98da4c9f3cd7bd4a6e52eef28b
-
SHA512
310c24a752637928fc0aef9ce7f1f1eba79d2033cce92620b2899c38509907c43ebab2f1d8c6380f3f565193279999bb3d2d58d5e5bad66e2c97e69e39f16b5e
-
SSDEEP
6144:sTP96Pms6GibtDH5rrxl2yonHRUtA2gb9QA04aU+eOWLWZWLk:i96OdXlZrxl2yo2Gb9QN0+eOGk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e825e0b98d027a6d3a33328d1e4939_JaffaCakes118
Files
-
e9e825e0b98d027a6d3a33328d1e4939_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE