Behavioral task
behavioral1
Sample
ea0f6e78ca5b0e22a93f77578ad078b0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea0f6e78ca5b0e22a93f77578ad078b0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea0f6e78ca5b0e22a93f77578ad078b0_JaffaCakes118
-
Size
2.9MB
-
MD5
ea0f6e78ca5b0e22a93f77578ad078b0
-
SHA1
90ac7730b57fc86d27128c28545bfffb2887ff67
-
SHA256
ef50716f719bfcfc1d284824470795406cb807dedb55fd111c6e0512f55761df
-
SHA512
9901ebb5e52683b0a5921dc71a0141c4fae0bed2515fc48a191efa93ef573c473ac70370c6285c2bee7fccea1fa4ce2d94d0b3205f3cc4a8b9c248badfa137bd
-
SSDEEP
49152:zvvVARODHM4HeOCq9WPeNIw2ngWDHVXrLfN74NH5HUyNRcUsCVOzetdZJ:j04T9WPwIw2gG1Xrj4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0f6e78ca5b0e22a93f77578ad078b0_JaffaCakes118
Files
-
ea0f6e78ca5b0e22a93f77578ad078b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE