Behavioral task
behavioral1
Sample
ecce09acd76b21198f8f9290788c0485_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecce09acd76b21198f8f9290788c0485_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecce09acd76b21198f8f9290788c0485_JaffaCakes118
-
Size
59KB
-
MD5
ecce09acd76b21198f8f9290788c0485
-
SHA1
9cd5d3172bbf9f8f1f2b3f8a8c5bcbbb2c87b866
-
SHA256
aa541caa794377ed1fbf5b7eb93a7e21c204d88dcf03b1cd3db76152b8483f37
-
SHA512
51956ce9168283d9178bb9a5cb5556bda18cb864bcfaf0eae3708253a152bddb59832825ad9cc9b12d57a9074624c167def0f90d6c1bf1c03d76faca0a4d11c5
-
SSDEEP
1536:1HZG4rZhu3VfiKcp7Xv7v5DaQk0kH48S3ptH:1HZdrZh8ZiKOfbgQ5c48SZ1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecce09acd76b21198f8f9290788c0485_JaffaCakes118
Files
-
ecce09acd76b21198f8f9290788c0485_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE