Behavioral task
behavioral1
Sample
ebc2f133a82aec30cc48bc34f1340590_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebc2f133a82aec30cc48bc34f1340590_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebc2f133a82aec30cc48bc34f1340590_JaffaCakes118
-
Size
251KB
-
MD5
ebc2f133a82aec30cc48bc34f1340590
-
SHA1
ab8b4912e629fc3836c68b99438dd4c98fff2475
-
SHA256
6cf52ee130dea7e2b6669c6efea1fd7ca4b013ae40d8bfc1316b551f6283f835
-
SHA512
e921bec889a1ae8596dfa5183a58723c2b228b024685d24650fe35a014cd8f665ec5957f5ba376da64cbad7e840e1c21276d956371da20344167d5a80bb02064
-
SSDEEP
3072:o/+6ZC3gdAp9JQz2Wl0j0gETw/jIF5U8vZHR9FQzr0lYT9zTpC1a1ZOvmR1fmvq4:WHzqDjRjy87IF5RHYWs/ivmD//Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebc2f133a82aec30cc48bc34f1340590_JaffaCakes118
Files
-
ebc2f133a82aec30cc48bc34f1340590_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE