Behavioral task
behavioral1
Sample
ed269c5b6a0ad240f7f92beb1d2fa028_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ed269c5b6a0ad240f7f92beb1d2fa028_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed269c5b6a0ad240f7f92beb1d2fa028_JaffaCakes118
-
Size
1.6MB
-
MD5
ed269c5b6a0ad240f7f92beb1d2fa028
-
SHA1
38c1c63e236f7588f36924a223e0c0e07232ebb2
-
SHA256
54d783ae9c8c0502359d7e307d7f809c9f5f4909a2deacf3790c4c430d02a8b1
-
SHA512
dfae00e9964ec52ba4cd434cdc511353b4e5e3f8773f934107d3531385e071c2af370e42575a1ce5fa34c345e2618644d0e6baf943d21762da11704c8b7d3eb7
-
SSDEEP
49152:nxuPf1F0f7cakLz0HBDpjg8632wPcakLz0O:nxqfT0DcakchS87ccakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed269c5b6a0ad240f7f92beb1d2fa028_JaffaCakes118
Files
-
ed269c5b6a0ad240f7f92beb1d2fa028_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE