Behavioral task
behavioral1
Sample
ea876bd919ad7bfa6110315818f1628d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea876bd919ad7bfa6110315818f1628d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea876bd919ad7bfa6110315818f1628d_JaffaCakes118
-
Size
302KB
-
MD5
ea876bd919ad7bfa6110315818f1628d
-
SHA1
7522f1a2c3a7eb177f02f5a09cf6a82ec0cb4f39
-
SHA256
efb8a75e2e7266cbb4390b9c251b77472bce0b6435204b0b79d009da75c76076
-
SHA512
ca3da53b8b1eaf8a4a01fc2c3ff8f86b58631bb2cd90f46df8213891eb4386a311b25bdcdf62fe59145a89143d8b439d47deb7c2eae527bdbd37be8120df1fb8
-
SSDEEP
6144:A3XZ6IbgvUbbgd4nj5HNF5wuTWbbIeA84WPA+qAmQ:AZ6GgvabgdRP8GAwm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea876bd919ad7bfa6110315818f1628d_JaffaCakes118
Files
-
ea876bd919ad7bfa6110315818f1628d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE