Behavioral task
behavioral1
Sample
ec193cfb3864db55bd634b3f28543aac_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec193cfb3864db55bd634b3f28543aac_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec193cfb3864db55bd634b3f28543aac_JaffaCakes118
-
Size
2.6MB
-
MD5
ec193cfb3864db55bd634b3f28543aac
-
SHA1
65e19e3b943b096d4897fa6513a68d4836929e98
-
SHA256
a3cc4875399e0311a04cc0ba62a7ad61fe8c50dd7fb34102dc0f026f260c2ae6
-
SHA512
b69230b35de731c77b0f9da0b63dbd2cf60316bd3eb61b221438444ff2b0922a98aa5f72962bd05f8670099a7f9efe63e1077cb2beeb7e3e4246102314943262
-
SSDEEP
49152:zu1pTI1hK6fsMuUVT4UCa/ROkvm+VV/7ZwjjmJay3:zwR6dKUBx9b3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec193cfb3864db55bd634b3f28543aac_JaffaCakes118
Files
-
ec193cfb3864db55bd634b3f28543aac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE