Behavioral task
behavioral1
Sample
eb7bca49193e0fb5fbeb8a45219dbd7f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb7bca49193e0fb5fbeb8a45219dbd7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb7bca49193e0fb5fbeb8a45219dbd7f_JaffaCakes118
-
Size
5KB
-
MD5
eb7bca49193e0fb5fbeb8a45219dbd7f
-
SHA1
4f6024c1732f69a6ae4e4c74c0f192fa424e5cda
-
SHA256
43f4063fe75313cff0788fd1728d53c3849ac609fb45cff559f230eb2ae7280f
-
SHA512
e3eb72c5af3e5379081ea9e93dc6c23e5ff58d26ca42368898c5d5ef67eb3790ef1fda5bb6413d6e9d7f4bbab41dea7deb5e218e5417780f74c0e22629aad8a9
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnml+ICnxIf:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb7bca49193e0fb5fbeb8a45219dbd7f_JaffaCakes118
Files
-
eb7bca49193e0fb5fbeb8a45219dbd7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE