Behavioral task
behavioral1
Sample
ec904edaa9955d0a7c3243a01bf8c60f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec904edaa9955d0a7c3243a01bf8c60f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec904edaa9955d0a7c3243a01bf8c60f_JaffaCakes118
-
Size
1.3MB
-
MD5
ec904edaa9955d0a7c3243a01bf8c60f
-
SHA1
d59daf890fedee073fd862dea3b12a8b519cab29
-
SHA256
36c6c079fd941c582581d5aaf6b50d15eda219fec255d0a45ab8b11250f51521
-
SHA512
52ca4474a3e386475a22ac6e16133b9624c5a41b9f8000979dc08098dd47102f51a5a8772ff5f6cdc0a9c7d87c068e62557547b93cf81a5cba43250eb27bf80b
-
SSDEEP
24576:GjhDqAxg3PPix1qw6lhC84/dfzCznLli0GEWKN0OGXzgV/XjvwDdGDvG:IqIgPqiwN/BCzLs0aKNWX8V/Xjq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec904edaa9955d0a7c3243a01bf8c60f_JaffaCakes118
Files
-
ec904edaa9955d0a7c3243a01bf8c60f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE