Behavioral task
behavioral1
Sample
ea66236960a5f6879dffd2d155503247_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea66236960a5f6879dffd2d155503247_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea66236960a5f6879dffd2d155503247_JaffaCakes118
-
Size
7KB
-
MD5
ea66236960a5f6879dffd2d155503247
-
SHA1
7b09848ff25d537a115489b39880d9859baa2dd1
-
SHA256
2e0365f1962b774b89f0cfd3a859445b7014da8fdff82850c53856c140eecdbd
-
SHA512
94265965c79c4621d5b3b1cc329434f55b860213a669bbde8fdf8374c532505da2523e2f4134387606a7b0f52f3fe7c5af028eaaa8405e0165e5bb00c68efb18
-
SSDEEP
96:3/rIvmmYxXS/VrrOM8Mep7jh3N4h3mO04Bx9Nw2XViaMqUZcwMz9BTZ:3/r14tr5KpfJNU3mO0+9647
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea66236960a5f6879dffd2d155503247_JaffaCakes118
Files
-
ea66236960a5f6879dffd2d155503247_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE