Behavioral task
behavioral1
Sample
ed82c752a5304a72671c9b6d7ba71a18_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed82c752a5304a72671c9b6d7ba71a18_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed82c752a5304a72671c9b6d7ba71a18_JaffaCakes118
-
Size
11.0MB
-
MD5
ed82c752a5304a72671c9b6d7ba71a18
-
SHA1
8e821491abc9a0f2bc572aa4fa4084ba0656a594
-
SHA256
54900a1036cbd3ebadf1157dec5bba8222a02f591d01a3ba817a56c71950f48e
-
SHA512
0ece1ba865f37b082a7c743b16e13583357858f4fd5281aeacf7c8d7595c53abc889d0ed9fd8f5279e9c69eb5f11209496884f5bd899491fb8f5cbb7205dfcce
-
SSDEEP
98304:XWINED+T35mCckFR+vicS43CTVicSib8jIUmNRJ35mCckFR+vicS43:XWIK+t33FR+6cWShab33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed82c752a5304a72671c9b6d7ba71a18_JaffaCakes118
Files
-
ed82c752a5304a72671c9b6d7ba71a18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE