Behavioral task
behavioral1
Sample
ef57c6d7e9a207b4a27db6d49f567a7f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef57c6d7e9a207b4a27db6d49f567a7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef57c6d7e9a207b4a27db6d49f567a7f_JaffaCakes118
-
Size
148KB
-
MD5
ef57c6d7e9a207b4a27db6d49f567a7f
-
SHA1
1f15d090056b3d4410abfb5a224111cbe1ec75f9
-
SHA256
f136dbdbb1d76d5e8ebb225f671815cea7c538a79ff3c63f3909aa806828c35c
-
SHA512
e4b1be6c3992275cf096abc36e5d8f9094715d5c5e9ea23d9dd8be94842306101dbc3ed2467f5a8d0d3dffed56bc1b75944ab6b10008e05fc247f03a1f0fcacd
-
SSDEEP
3072:i2D1vfr+WPnF3c5trk3qz+H5/LgAmR1L48IezXqmfRxZ890bI1Q0V:/FfqM2rCsix2L4fKD/ZDuV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef57c6d7e9a207b4a27db6d49f567a7f_JaffaCakes118
Files
-
ef57c6d7e9a207b4a27db6d49f567a7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 794KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE