Behavioral task
behavioral1
Sample
eb05a4f4bd9a9392f8e62bf5e94eebdf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb05a4f4bd9a9392f8e62bf5e94eebdf_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb05a4f4bd9a9392f8e62bf5e94eebdf_JaffaCakes118
-
Size
5.8MB
-
MD5
eb05a4f4bd9a9392f8e62bf5e94eebdf
-
SHA1
f77b0193a782c1339eaa051dfb00ce858fabe2f7
-
SHA256
e325ddd9d5d9a78374b20625811eb0373b7db500df746ec8fb8b215a908e73f6
-
SHA512
7f76ed36610859fda4e0f5e0d98d840c490dd6a6508c021d82236251f5c09eeffa40117edd4d7d6a4cc9c8a783057ddd0f86a21b2e2705d99a0437c0327b99b5
-
SSDEEP
98304:GTE8sSdb/gg3gnl/IVUs1jePsozYmcO49fDWAgg3gnl/IVUs1jePs:G7Ttgl/iBiPTZcfL1gl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb05a4f4bd9a9392f8e62bf5e94eebdf_JaffaCakes118
Files
-
eb05a4f4bd9a9392f8e62bf5e94eebdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE