Behavioral task
behavioral1
Sample
e76d69c39cf2ef834314ad16e3f68311_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e76d69c39cf2ef834314ad16e3f68311_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e76d69c39cf2ef834314ad16e3f68311_JaffaCakes118
-
Size
25KB
-
MD5
e76d69c39cf2ef834314ad16e3f68311
-
SHA1
08b3fe77faf25fe88bbd958de1dab373e5727cf9
-
SHA256
31a2419c05679aea605c0153e0f064c7592ca7df74dcc4a9a4fab2fda042632d
-
SHA512
ce1590bea5b131b9de9310b94f76629a03c0ef5f54c407755192b4beec71211521327e9832515a9efc096baa4cb1df7c7049fcb83c8a951cec60d2327e6946d8
-
SSDEEP
192:36aVjCjy2KdkTFH3KCKvd++9ZGAmJ5FkgIrxjhd:VFCj4+93+U+ZGzrkgWb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e76d69c39cf2ef834314ad16e3f68311_JaffaCakes118
Files
-
e76d69c39cf2ef834314ad16e3f68311_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE