Behavioral task
behavioral1
Sample
eb4d0bc8db221308077cbacce0dfb610_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb4d0bc8db221308077cbacce0dfb610_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb4d0bc8db221308077cbacce0dfb610_JaffaCakes118
-
Size
133KB
-
MD5
eb4d0bc8db221308077cbacce0dfb610
-
SHA1
c60346b0b5c203c1e34aa4c25b8e8f5aa85d7e00
-
SHA256
f6fb4fae987a19ec1ddff0bc69486283accd35a2acfef0f2f07280190c9f6bfe
-
SHA512
5b13d0ba38a312b3c1fb90578142714016c27225b12b64241849185a7772fbbe65d0e825292561fae30bbc5085c7b6bdfecd3e0ff33c42dfe82d3abc1c9f0c41
-
SSDEEP
3072:r9hpXOUkLoNIuu6fO2WBU6zCaGMbDG9gky3u/2APTdiQD5OgJ4IG4fQ:r9n+uu6fWBU6SMbSh4u/D7gQs4fQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb4d0bc8db221308077cbacce0dfb610_JaffaCakes118
Files
-
eb4d0bc8db221308077cbacce0dfb610_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE