facj
Behavioral task
behavioral1
Sample
eb6ee085fb89027279ab53e1c6bc91e0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb6ee085fb89027279ab53e1c6bc91e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb6ee085fb89027279ab53e1c6bc91e0_JaffaCakes118
-
Size
134KB
-
MD5
eb6ee085fb89027279ab53e1c6bc91e0
-
SHA1
c66e1d6dbb2138db19b9acf6222d74fa2498ec1e
-
SHA256
0dae51a37dbe85e76de2fc0e48d427cbb6643858c7da154d84b19811e0c54d7d
-
SHA512
6ba0e52b536e5070833cf07f23ab91931c86d4a5f6ed57f0a014fb7da4954bbac28ac17fdc3e30e88813165d426b75fe9a81b878f701cc4808c9161f4994b1d4
-
SSDEEP
3072:cCFCeZxv5VFMNN2dGre2HYNkSCJS26fBRO99madJouth5:vFCe30UAYaSh7G99T3oSh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb6ee085fb89027279ab53e1c6bc91e0_JaffaCakes118
Files
-
eb6ee085fb89027279ab53e1c6bc91e0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE