Behavioral task
behavioral1
Sample
ea7765c0147c069a85081e80a6fce6ff_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ea7765c0147c069a85081e80a6fce6ff_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ea7765c0147c069a85081e80a6fce6ff_JaffaCakes118
-
Size
302KB
-
MD5
ea7765c0147c069a85081e80a6fce6ff
-
SHA1
49ca3e55ecaafc3162fb6b3f81456a0f2b5f39d3
-
SHA256
f9105e8b591c62f1011d0877cd81a4203360525034dd983c07701660547a275f
-
SHA512
d6d085f05ea75c9a6250e196bda19e30b0e02dc8ff692f8ef8c8603ac62ee1a3141e4bd8a8013961fe5890c9cf1280c088451a4a8ad20a518190276df8db3958
-
SSDEEP
6144:fuVJnSgB/L3xDhZCZA9WJ5NEtcNrSr14Mr2YsjFh4lmQ:fwSgxFDhkfJ5CuY52Yih4lm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea7765c0147c069a85081e80a6fce6ff_JaffaCakes118
Files
-
ea7765c0147c069a85081e80a6fce6ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE