Behavioral task
behavioral1
Sample
ea84008a64015505446138dd43681b09_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea84008a64015505446138dd43681b09_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea84008a64015505446138dd43681b09_JaffaCakes118
-
Size
5.1MB
-
MD5
ea84008a64015505446138dd43681b09
-
SHA1
8d0135836564c84a4b425d681420c58773c03ba0
-
SHA256
b03049f9ca93e15dde5961c5a917e4fab8f0282e0f512522ea76ecb9e319e0bb
-
SHA512
546bc742b418a5fa57c32e8dcae85433467076420b03f5e590f8ffae2365d7b1ffd8462065213a4f06c792d2edfcfeee5f8234eb8c730f0e4d07921652da4181
-
SSDEEP
98304:DyIwRrbQoSt8IWVhbOI2/T38MzAs2QnM6OetTq3:DW9bQogkhbOI2/AIAsxB5T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea84008a64015505446138dd43681b09_JaffaCakes118
Files
-
ea84008a64015505446138dd43681b09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE