Behavioral task
behavioral1
Sample
ef6d1d55171d9e52118ea9e6dd2ed499_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef6d1d55171d9e52118ea9e6dd2ed499_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef6d1d55171d9e52118ea9e6dd2ed499_JaffaCakes118
-
Size
27KB
-
MD5
ef6d1d55171d9e52118ea9e6dd2ed499
-
SHA1
6a3b3c930db61290d2545a2576649c3c3fce0190
-
SHA256
63cc49a088fe70787a15386c237d4b46de3656ef053d9041a05b86d059eeb777
-
SHA512
dfbe9074c337880a4b2c094306660d57174bf73059220c7d5c422fa04963cc0e37ab2cc791fcd34e8c15c9c73e9f745b960586df512f88711d05d472654a2d1f
-
SSDEEP
384:b5+vBDp9LDoU5lVkUew3/dq5d5omL2pkOW9/e1nh4jVCo:bUBDMU5hXE5tmDGp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef6d1d55171d9e52118ea9e6dd2ed499_JaffaCakes118
Files
-
ef6d1d55171d9e52118ea9e6dd2ed499_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE