Behavioral task
behavioral1
Sample
ee7b48e2e937c1b78cc5392923a7d7c1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee7b48e2e937c1b78cc5392923a7d7c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee7b48e2e937c1b78cc5392923a7d7c1_JaffaCakes118
-
Size
115KB
-
MD5
ee7b48e2e937c1b78cc5392923a7d7c1
-
SHA1
5472d6fd4fa64eaa1bc532b59e723a3a0332bef1
-
SHA256
40531af08f9c13e38cee7a1c1875c3c6f10dd4544b41fb142195b278f8e305d2
-
SHA512
3d6b69be4eab1173a31e8b47409850e70504cb7cb9d3efd017b4bae9ad70bd7e95026491a834f945a1f507dea575de82490d5825f15312fbb22d339a8272e60b
-
SSDEEP
3072:PJPqOr3B8ZOzoYTqTc+M0PmR2I+UsA2fv4C:RPqKJzTqTcd0PA8UsFn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee7b48e2e937c1b78cc5392923a7d7c1_JaffaCakes118
Files
-
ee7b48e2e937c1b78cc5392923a7d7c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE