Behavioral task
behavioral1
Sample
ef98b2ef746d51ebe14cd344796d5e35_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef98b2ef746d51ebe14cd344796d5e35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef98b2ef746d51ebe14cd344796d5e35_JaffaCakes118
-
Size
19KB
-
MD5
ef98b2ef746d51ebe14cd344796d5e35
-
SHA1
b15f20715f00a6f65f1f832480bc00918c0c1570
-
SHA256
b81c39389cfdbd7175e7bded750b63178ab557b4ba19dc2470e713129b6d63c7
-
SHA512
56bc20868c95a6bffd34652c010ac835776920fa407ff79550cb0b9386199343e2fb16a5e9040d09a2ec948263c72ebbeaf7e0c775f9c6847353a79475d50db4
-
SSDEEP
384:PH1cs9VvJygFM44HRx6uCyIPQNgn652buhn8xXpeLylW24c+pcFoP+F/4rXG4D:fCIVRNyHNN76xXpiylX95A+F/e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef98b2ef746d51ebe14cd344796d5e35_JaffaCakes118
Files
-
ef98b2ef746d51ebe14cd344796d5e35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 494KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE