Behavioral task
behavioral1
Sample
ec2c05d315de3142ad4167200ebb8d5a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec2c05d315de3142ad4167200ebb8d5a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec2c05d315de3142ad4167200ebb8d5a_JaffaCakes118
-
Size
106KB
-
MD5
ec2c05d315de3142ad4167200ebb8d5a
-
SHA1
92dd948920a1e5a59cab80a428b2cbe531fd26b0
-
SHA256
bf57aff79c2239706400e03f370b051491921ea4d67701cc97cd599f05eef236
-
SHA512
b352970d1ac2e19d25433d5ac64a6ec9bc9c59a895a9b92de0f2cbedecab543dfdf1d69bf1f712eb934be198ec8ec54970c4046938e59cafe86dbebc4d2dc7eb
-
SSDEEP
1536:GmNQNkTWhhKtncDvQtzOKUXztwoi5Npn3t9pFtFdooJ2dubQeqvJ2gu:Gi0kTWHKtnfGt/qNltPFtFdokPqx2gu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec2c05d315de3142ad4167200ebb8d5a_JaffaCakes118
Files
-
ec2c05d315de3142ad4167200ebb8d5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE