Behavioral task
behavioral1
Sample
eb2a233d14a2bd77ea96a94bca46dadc_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eb2a233d14a2bd77ea96a94bca46dadc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb2a233d14a2bd77ea96a94bca46dadc_JaffaCakes118
-
Size
164KB
-
MD5
eb2a233d14a2bd77ea96a94bca46dadc
-
SHA1
c119b770929363d1f8c8fa4069a5b3a126de88b8
-
SHA256
1527b37b2ee79b695c4d371e22696bc07b0552b452072572b907f8961a8f1aa7
-
SHA512
067245938e0a56e4e3259f8a6941d1df9ca1df330271ddc2e957731f38bc8b37f6a4828787ca38ad02256a2d6982edd9da92c54cf2687b6ebdef21fe0b4e6c15
-
SSDEEP
3072:PZMFQPD2zQJokUcDkDe8KW7QeHJ5b2MXxztDHiSGR2n7AwS:PZPyzTkDIKDeHjNxhDHie7A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb2a233d14a2bd77ea96a94bca46dadc_JaffaCakes118
Files
-
eb2a233d14a2bd77ea96a94bca46dadc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE