Behavioral task
behavioral1
Sample
eb7492f25cc531c559874937fbd6c479_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb7492f25cc531c559874937fbd6c479_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb7492f25cc531c559874937fbd6c479_JaffaCakes118
-
Size
7KB
-
MD5
eb7492f25cc531c559874937fbd6c479
-
SHA1
38e60c39f1232f9f7bbbc216c7d5d022a1551d32
-
SHA256
5b3fa4c7b93e92fa225fff00c3ca162f35b74337a8c185aa650d5f88b4f0a644
-
SHA512
a699c77ffc6578cb22cabd62482e2fa0030c35a509865919b761516666224575682300af6436a8f42f027f7510bb8e70df6e982c4b3abc8a4d021c690fb3f99f
-
SSDEEP
192:SR4AZSumRVMZJB9eSSNg4mrKPoG4v7S5CbI5:G4AZ5mLM6ZsKPoNTXbI5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb7492f25cc531c559874937fbd6c479_JaffaCakes118
Files
-
eb7492f25cc531c559874937fbd6c479_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE