Behavioral task
behavioral1
Sample
ec53eb24bb1dee6783748dbdc28ab86a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec53eb24bb1dee6783748dbdc28ab86a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec53eb24bb1dee6783748dbdc28ab86a_JaffaCakes118
-
Size
370KB
-
MD5
ec53eb24bb1dee6783748dbdc28ab86a
-
SHA1
d92fd2e9d15bae69b0972b46437ff28bd8d7a8e7
-
SHA256
5b3dda5312cf824710ccc651db7211cd28f46c5b842b0b872fe436a59bb06681
-
SHA512
0fd33eeaf869031a23f753cea27c29df8238b8901a2707be6dcec47f9fba970dd68704aec3ef10cd5610c2618f7d57fb2d59c931b72d4c92dee58540b2600fb1
-
SSDEEP
6144:Bz9pXlTJrsJkqszmVN4LZDufo2sz4hFf9wKVHybqVSXcClpLrGfe2g/:jpXlTxUkHzmr4luftN39th9Ss2r7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec53eb24bb1dee6783748dbdc28ab86a_JaffaCakes118
Files
-
ec53eb24bb1dee6783748dbdc28ab86a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 361KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE