Behavioral task
behavioral1
Sample
ecf9d10b08a2220c8dd39a929bf22ad2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecf9d10b08a2220c8dd39a929bf22ad2_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
ecf9d10b08a2220c8dd39a929bf22ad2_JaffaCakes118
-
Size
302KB
-
MD5
ecf9d10b08a2220c8dd39a929bf22ad2
-
SHA1
142c0a5868f5c8ead4517dc652c611da536455d5
-
SHA256
8f281e3ce39dbc9dc9b1f13f7562d3a0391dc6dd0cc6f48abdcab7946c7363af
-
SHA512
26573dc0c7bf24e70fa191e2d9cc1e115f4b34c772a3628e2793d1d86585129058ad5f2629fef73fa54622299f6fad0d21e818d8a37d0a6bc4037f8b1580c730
-
SSDEEP
6144:KkaXwgp1bwo8Qi1I6rT0bU08t5vv6HWsb9xmRGmQ:KkPKwFb1brYbUzt9vUDm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf9d10b08a2220c8dd39a929bf22ad2_JaffaCakes118
Files
-
ecf9d10b08a2220c8dd39a929bf22ad2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE