Behavioral task
behavioral1
Sample
ec15c9a5cb04a541d06c98f6ca89d4ad_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec15c9a5cb04a541d06c98f6ca89d4ad_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec15c9a5cb04a541d06c98f6ca89d4ad_JaffaCakes118
-
Size
5.1MB
-
MD5
ec15c9a5cb04a541d06c98f6ca89d4ad
-
SHA1
8abd4536e9accc09996987392b4eead4df4c6c09
-
SHA256
851605a5d151d678ab0e37c68ed6ab983615f6f1bfed5af109531820fc26236c
-
SHA512
ee7535d51e0ac5cccd25430a5f368b71e0c3d4ee13c29e67a75997924ca4079ce191a06b941a21dc34d6fcc5a486bb24446de6bb9130a6572db80f9eac12dd1b
-
SSDEEP
49152:MJoHB5tqvHGuRsHE/EEf+YjjELnWO4vxaWy6Jj+eIxaQ21M7Gay35bkrfg8FYrim:MJoh5kZsHEeFyROdQ30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec15c9a5cb04a541d06c98f6ca89d4ad_JaffaCakes118
Files
-
ec15c9a5cb04a541d06c98f6ca89d4ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE