Behavioral task
behavioral1
Sample
eb857841d8a4ef8404fa60dc9195badd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb857841d8a4ef8404fa60dc9195badd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb857841d8a4ef8404fa60dc9195badd_JaffaCakes118
-
Size
2.0MB
-
MD5
eb857841d8a4ef8404fa60dc9195badd
-
SHA1
a23389d3625ca0b0d9235090f70d0200c51f8e46
-
SHA256
7e98c2928ac54c29f86c7d9985927ef7ae8bf7a9b7e1335c8a2c9a6198d0397a
-
SHA512
c3c5df234d9d26b699bd5eb8e669a3b2d259bcc12a14830738a87e5fd7b67e5118fe9fb3cf905f149f1d6e4c4f0beaa5d40c37fc78e39c48216009d928aa2541
-
SSDEEP
49152:K3G2IZPrVXVnHoQGQ7ai7D3xTgOxYwpKsJ3JrO8OMRBdGQ7ai7D3xTgOxYwpK:KIZPrfHoQD2i7D3xkOxYwpKshJC8OMRK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb857841d8a4ef8404fa60dc9195badd_JaffaCakes118
Files
-
eb857841d8a4ef8404fa60dc9195badd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE