Behavioral task
behavioral1
Sample
ecf72949a8c1f64cd3b13d983c611667_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ecf72949a8c1f64cd3b13d983c611667_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecf72949a8c1f64cd3b13d983c611667_JaffaCakes118
-
Size
2.0MB
-
MD5
ecf72949a8c1f64cd3b13d983c611667
-
SHA1
f1570708b5f7da531cffc34356f30b400dfb2a57
-
SHA256
422c8b4e89252be7e587f9ce6a4350e3281c464d1087ef394313cf99e55f44f3
-
SHA512
343724edfdc9ce38cf663252cb8916466c47508c16d4b19a8d87451755876b9540ddc3fdaa42a6de7a1594d534d5ed3fcf6b6b71e7ff17794df84042a05c1b8a
-
SSDEEP
49152:rfigM4kDsGDehOZPdt/Mkh8DL4wjMWDLrI7t5k7EJ/Mkh8DL4wj:rfigM9sQdtvMkGDcwjB7I7t5k7ENMkGT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf72949a8c1f64cd3b13d983c611667_JaffaCakes118
Files
-
ecf72949a8c1f64cd3b13d983c611667_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE