Behavioral task
behavioral1
Sample
ead551e3ed3d9429f7ee077636f0eb48_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ead551e3ed3d9429f7ee077636f0eb48_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ead551e3ed3d9429f7ee077636f0eb48_JaffaCakes118
-
Size
5.1MB
-
MD5
ead551e3ed3d9429f7ee077636f0eb48
-
SHA1
67cea4027d31faeed1e1ce64dbda583f67cdb67b
-
SHA256
a6df0ccbe797ad7ebe7b186b2a11a566dad2ac6b940aa265342dd59049365c87
-
SHA512
b8ed3b5ac978c3738ea5a1deb15ee4b477b42148af8fe25b02af27a83ba0f5cc86a76e9e321e43a14567c64e28681d6523b97f15d646c1673ef2a79ff313109f
-
SSDEEP
49152:88/rmScLoIXNG+v3//+wrAb8MILEJQLwGhsQ/ay3or8ta2hNU/Gh9zMo7aY3MTJV:hHHgXvPjG9QX3uGZ2T3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead551e3ed3d9429f7ee077636f0eb48_JaffaCakes118
Files
-
ead551e3ed3d9429f7ee077636f0eb48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE