Behavioral task
behavioral1
Sample
efe02733e81cae2a2bec119f0038c050_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efe02733e81cae2a2bec119f0038c050_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efe02733e81cae2a2bec119f0038c050_JaffaCakes118
-
Size
33KB
-
MD5
efe02733e81cae2a2bec119f0038c050
-
SHA1
18d75493a16ae9a3047e8e343b1bec1da40e1a98
-
SHA256
f1b79d8ec6b4fca0a53a29d439fa812c66dd33b250da8526d532b460a3d46d61
-
SHA512
4b6fbea1a0066b5c7955446dc704eef7cb45cb88569417f976bbcd6eb843ded577b9caa194a6891831b4bf782b61f60666301a0a1323f3af2def245cdfe5e4d3
-
SSDEEP
768:njESpk1/sRYP/UosfFSON+PqEZY3E+cshEY:nnTYPraSu+C+cLRe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efe02733e81cae2a2bec119f0038c050_JaffaCakes118
Files
-
efe02733e81cae2a2bec119f0038c050_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ