Behavioral task
behavioral1
Sample
efed309cc7400a5b56b3e5b7485842ab_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
efed309cc7400a5b56b3e5b7485842ab_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
efed309cc7400a5b56b3e5b7485842ab_JaffaCakes118
-
Size
266KB
-
MD5
efed309cc7400a5b56b3e5b7485842ab
-
SHA1
f062e691ae500f7ed74299a8028ddb5e16349a9e
-
SHA256
122f5d06ffa496dcc3a1c2b14feae7a52660f722a61db491f4edd10b850f6b4c
-
SHA512
57587510ea801cb2aa08715e84c2aebee07109be0a0e93bdca1f6b614ba106dddf2c49b52e604273ddb6f835f56acdace2d0c63c4c6dffd3884404345f756fdb
-
SSDEEP
6144:u7km0OAhz7HyrJQ1mtYMDkzFpvhkmJd16GZsiNbALdRJHbDYXBhQ:u7k9OAN7HyPlD4pvhkw16GZsilQJHYX8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efed309cc7400a5b56b3e5b7485842ab_JaffaCakes118
Files
-
efed309cc7400a5b56b3e5b7485842ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE