Behavioral task
behavioral1
Sample
eaa4d05c16c11b2b1f94b96368379300_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eaa4d05c16c11b2b1f94b96368379300_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eaa4d05c16c11b2b1f94b96368379300_JaffaCakes118
-
Size
256KB
-
MD5
eaa4d05c16c11b2b1f94b96368379300
-
SHA1
3f94d8e2718979810d2fd39c6e7df42d5a31c1f1
-
SHA256
75f20b8cc1297a623e523c9254f98f258a1ae0ca453e72ae64ae417ec31999db
-
SHA512
83436d79b5d46d19923ddf2ed4e55e8b138583aaeddfd44ace3261a532b246cde11719ea48affaa758da44b5d68de1fb830f0529bf121298418ed9c80ea72b89
-
SSDEEP
6144:XPRdqe/UNsg/GhGA4MCZUezutHE5K5HDMEl+8moSZ81:X7D/UNN/GhZCZlSRE5KxDMEl+ZoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaa4d05c16c11b2b1f94b96368379300_JaffaCakes118
Files
-
eaa4d05c16c11b2b1f94b96368379300_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE