Behavioral task
behavioral1
Sample
eb864f3dd0deac005e11c1beca22abc9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb864f3dd0deac005e11c1beca22abc9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb864f3dd0deac005e11c1beca22abc9_JaffaCakes118
-
Size
501KB
-
MD5
eb864f3dd0deac005e11c1beca22abc9
-
SHA1
a9f600e846d872814da9742f8e397f476c80d172
-
SHA256
318d2234fd31f67ecfaf48d2446d0e3a922048021db6e90c98a311fd7679e09d
-
SHA512
7b2a9803891d9de6c281a7e3685b88656b4faa3b4b2458b0be8b54a956f209ff31d780a0de145fd7e0c3ebd6de8f38f0872f0919577f4ccf0d429ddd9fa6c806
-
SSDEEP
12288:AVYgJgq23YQ5bRFJ4D6ufeatAlGJyHj0Du7xyrjW:cNqr33dnhUyHj0DQgjW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb864f3dd0deac005e11c1beca22abc9_JaffaCakes118
Files
-
eb864f3dd0deac005e11c1beca22abc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE