Behavioral task
behavioral1
Sample
ea510224945f5292d440575968b6fce1_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ea510224945f5292d440575968b6fce1_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
ea510224945f5292d440575968b6fce1_JaffaCakes118
-
Size
1.5MB
-
MD5
ea510224945f5292d440575968b6fce1
-
SHA1
a19db7491a55af0a0b86ccb471c4b53778f1c8eb
-
SHA256
cb8456a1780b288d0bc80f4bd6fe9c686d02fd5ec07724e6331aadb2b512e00a
-
SHA512
67b835a9f909bab16a1364f2296da58b86cb75ae5223cbf35e9f621d27ae4fc4a7fbeee21109fa5cad8c9477d7c38064d10aea0ed81a4433e3844fe151bfa056
-
SSDEEP
24576:botp+17iTD3jCcjukL2Bzk4fIKRkWdgT45tcjukL2Y:ktpc7uD3jCcakLoY4fIKSW6TItcakLj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea510224945f5292d440575968b6fce1_JaffaCakes118
Files
-
ea510224945f5292d440575968b6fce1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE