Behavioral task
behavioral1
Sample
eda78b260933039097bc4f255c700e87_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
eda78b260933039097bc4f255c700e87_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eda78b260933039097bc4f255c700e87_JaffaCakes118
-
Size
1003KB
-
MD5
eda78b260933039097bc4f255c700e87
-
SHA1
254bc6aa3e8d566bbac070d6367089775f824496
-
SHA256
5a0ad5aa71e04aeff13f681f89656c9c4b0685e4e102253cf0a10a2fc75ecd15
-
SHA512
fc1ae4bfebb69683bb786c628d4ef916c8070c7a0d61466fd9808c29e895d6309c55fa7a31dc90a8c3240ea361e01271c3fba1694d8029d6732b004cf0c48722
-
SSDEEP
24576:mm85KsQfaxY82G1CUHH6DGQoadai7D3uITjIFOxo53ApIj:mmaKsQfam8hn6DGQ7ai7D3xTgOxYwpK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eda78b260933039097bc4f255c700e87_JaffaCakes118
Files
-
eda78b260933039097bc4f255c700e87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE