Behavioral task
behavioral1
Sample
ef21583b3d519e7faf713cea9a9895b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef21583b3d519e7faf713cea9a9895b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef21583b3d519e7faf713cea9a9895b1_JaffaCakes118
-
Size
54KB
-
MD5
ef21583b3d519e7faf713cea9a9895b1
-
SHA1
9aea445bb82bc52ee5b905312931222e5ac19cf2
-
SHA256
02937b5cc1ea71c777e6d3db886152e0a57a41f1d9f954e76c2e17fa1c2d69e5
-
SHA512
93ae22c29f7f62e161d3ca3d2469a091d9bf9c71560234753fb49f78b1d0d6f7f0e6e5e7c419608d73666b6b6b328cb102bf2bd954c8301f44b568850993e090
-
SSDEEP
768:GZlhHhMxL2/7hKhcXmmOU4qlkKQZC1/Kmn2iUIEw7mIdjk:GZLHhsIohc2mjjlLQZU/KSLTrf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef21583b3d519e7faf713cea9a9895b1_JaffaCakes118
Files
-
ef21583b3d519e7faf713cea9a9895b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE