Behavioral task
behavioral1
Sample
eef32fb26dfb49709d44366844b17154_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eef32fb26dfb49709d44366844b17154_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eef32fb26dfb49709d44366844b17154_JaffaCakes118
-
Size
462KB
-
MD5
eef32fb26dfb49709d44366844b17154
-
SHA1
0ab4e60c30fc86942e77cf2dc7c27b4fb0f699aa
-
SHA256
0bce641a5c8d5707a5a68034e75563e4e217b2bbd1d9baecf876d021cf102de6
-
SHA512
022c7d0c76e0eb44085c4dfbb5b640b502fdb1179aad8f077dbd0b9b6165cb95827c725665c9fdcfc28ae82fa9dabfd96790f693d784137cf0f48c54819ca8e8
-
SSDEEP
6144:3QmExpNp2C7sC+txHi60KdwRydaa4HAuRCs3LY9E06ltKBbjE+8cnt8f3Ni:3F0pNpZ7sC+35XyXaIlLY9E0UwBjlnQg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eef32fb26dfb49709d44366844b17154_JaffaCakes118
Files
-
eef32fb26dfb49709d44366844b17154_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE