Behavioral task
behavioral1
Sample
ec9b103d5dc2f24c1a4349b4f7d700b1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec9b103d5dc2f24c1a4349b4f7d700b1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec9b103d5dc2f24c1a4349b4f7d700b1_JaffaCakes118
-
Size
1.8MB
-
MD5
ec9b103d5dc2f24c1a4349b4f7d700b1
-
SHA1
5de25aa18380b8c454144f80d0fe2043f6606aeb
-
SHA256
3141d8282f09424207e0ef815f40b6ec955a46d65cb11f221f7449205c02555b
-
SHA512
e6cbcbcd9491bf92f1d22cd0fbaba52bbbd4087b8d4a6cca699c6a12d83c9c2dc8dd9b225e087a2ee7dd65f910e95ca9fc9f1ac703acf8e9c27de5f9ad68a8af
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqP:SCqm2Jpr0nNM7Dus7Nxa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec9b103d5dc2f24c1a4349b4f7d700b1_JaffaCakes118
Files
-
ec9b103d5dc2f24c1a4349b4f7d700b1_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE