Behavioral task
behavioral1
Sample
ea8f1bf1c0eed80f3df7ac9b036d1e6d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea8f1bf1c0eed80f3df7ac9b036d1e6d_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ea8f1bf1c0eed80f3df7ac9b036d1e6d_JaffaCakes118
-
Size
48KB
-
MD5
ea8f1bf1c0eed80f3df7ac9b036d1e6d
-
SHA1
9458d49e2a6bae83915e2b6a0a588e2e4b1dc7cb
-
SHA256
8a6acad3e0129a02802d8d3ad77a93287dbc4d1dde2654e8db79373af3db5608
-
SHA512
443d4dcc2dc64d2223236d621d0d2419174a984d82a7365fdf66bf4fa0d59a64a2dbe2de38452542065d5d1cf32b6d6f310a1e681228002d437c182c63b826a3
-
SSDEEP
1536:n0PjO2S9bU56FyVW3UZGR9ME+8rFknouy8K:n0Pj5X5Zk3UZG77jryout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea8f1bf1c0eed80f3df7ac9b036d1e6d_JaffaCakes118
Files
-
ea8f1bf1c0eed80f3df7ac9b036d1e6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE