Behavioral task
behavioral1
Sample
ea78e5d7243a9a4f63782f29172c5a01_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea78e5d7243a9a4f63782f29172c5a01_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea78e5d7243a9a4f63782f29172c5a01_JaffaCakes118
-
Size
133KB
-
MD5
ea78e5d7243a9a4f63782f29172c5a01
-
SHA1
a3f85459a37393a641ed18cb10eb220e2d6e16e3
-
SHA256
8426ac61371bec8e3dc613da37673e8e11ee7fad3420a88a284d113a05f53572
-
SHA512
0373e854191c114cb3f41faba1a633e6be8fa59720fc5e86becca33e9739d5d1d88900faaa3c2c83e4938ce32f77494a6c84fe7dd97c7a1aacf5ee8e3f89e168
-
SSDEEP
3072:1bQGlmK2SGpehMibMBPO9DP6fRqeDEIYY3QwzT00tNP3GxruR0kLdeQ:1bQGlmKbeQMFBPOxS5qYYYtzQ0XGVuRz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea78e5d7243a9a4f63782f29172c5a01_JaffaCakes118
Files
-
ea78e5d7243a9a4f63782f29172c5a01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE