Behavioral task
behavioral1
Sample
ed958e2f5133a42e969db2475eee978a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed958e2f5133a42e969db2475eee978a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed958e2f5133a42e969db2475eee978a_JaffaCakes118
-
Size
501KB
-
MD5
ed958e2f5133a42e969db2475eee978a
-
SHA1
20755e33eeb2954c1fa179a464ec95cda9316493
-
SHA256
f31b39e1cf8ef7b95f4bb828cd97c7e65f7514d87982eb88af5c9fa2f20209f6
-
SHA512
9559a472e74d5346badc99892391eef07ab87455cddbbd007618082a37080bbc045dfc89e96b90c20417f64311ebf4f89c7f39fcd138a5a670cc0a1e7df94b02
-
SSDEEP
6144:s9WH764iNcmiAzsHRaAs1uafraa0unFk4FPw+vVrybYqL/i1YHWQVqNF056WUvyJ:s9+7CzEbOlfjNwKqP9VqA56WlY3saM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed958e2f5133a42e969db2475eee978a_JaffaCakes118
Files
-
ed958e2f5133a42e969db2475eee978a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE