Behavioral task
behavioral1
Sample
ea5e79c92b78f6ff0f24a85fa759acb7_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ea5e79c92b78f6ff0f24a85fa759acb7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea5e79c92b78f6ff0f24a85fa759acb7_JaffaCakes118
-
Size
133KB
-
MD5
ea5e79c92b78f6ff0f24a85fa759acb7
-
SHA1
f4fa5f38a4a217207bf1d4d3980e478b9cd9c1be
-
SHA256
29940043029a400af3612448f37ff2fa50368bcbe936f88ba106d1d0bc1e8f12
-
SHA512
15ef7ba6861d7b220da0d7f8d03aa1651b64db1869eb2b1f09da77c3bec20c7143cd162e216124940041c70e4b0234f354e4604e4b1b82c471aae45bc815a48a
-
SSDEEP
3072:KNL7+/YDbhDsBhylfyoy3vaT+cyDGszUHheQ:KNL7+gxDsBS83yXsLzoMQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea5e79c92b78f6ff0f24a85fa759acb7_JaffaCakes118
Files
-
ea5e79c92b78f6ff0f24a85fa759acb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE