Behavioral task
behavioral1
Sample
ed237ea2db60ca2f0c20a265f9379bd2_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ed237ea2db60ca2f0c20a265f9379bd2_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ed237ea2db60ca2f0c20a265f9379bd2_JaffaCakes118
-
Size
106KB
-
MD5
ed237ea2db60ca2f0c20a265f9379bd2
-
SHA1
8d18ed753126dccf0e34ecec6178c46da7cd147d
-
SHA256
0f85ac48045c768c5cb41c79ed33bcd417ceabc27b7c53568f2aa0b5c4d7f2f1
-
SHA512
6a83835d867e3e47858902bedb97f0b3de853822233fc51eef42ccaafe5f74c5a10b7265b648b203e078e761cccab4378862685fd81976a2f3725262ee250226
-
SSDEEP
1536:ajQVyv/sAY6yyZcj22FYvojYyX2b4DbQTqXJGhz72KfG8d7ZI/q0jNQYprXM:FJacj8v7wQ+ZGx7w8wjjP8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed237ea2db60ca2f0c20a265f9379bd2_JaffaCakes118
Files
-
ed237ea2db60ca2f0c20a265f9379bd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE