Behavioral task
behavioral1
Sample
eb59152d0f4891bc1d95b119e36e2cfc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb59152d0f4891bc1d95b119e36e2cfc_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
eb59152d0f4891bc1d95b119e36e2cfc_JaffaCakes118
-
Size
944KB
-
MD5
eb59152d0f4891bc1d95b119e36e2cfc
-
SHA1
89385b9ce8ab4f442bbf63623752364ebd188a6b
-
SHA256
56bb0a1dde7e8d2f5cec82536090dca3cadc3697976cc60dc4ecb6bafae14f5b
-
SHA512
eb6bf5f7e866249b519f4aa8f374a10be5b0d87f13703a27c6d3178e8acfa7eb58af5048ab84d87f8e40cdd211d3c4543db06c51023e1a88e43de72956436669
-
SSDEEP
12288:+DLvEYRBeM2sZCGf+SlaBNMXKj7sGxtGZjG5JJjjYBb6naQyTXX4M1HIvdIQXYty:+D7N/eSdGx86zJjjy6nxC4M1HI1q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb59152d0f4891bc1d95b119e36e2cfc_JaffaCakes118
Files
-
eb59152d0f4891bc1d95b119e36e2cfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 471KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE