Behavioral task
behavioral1
Sample
cec5eb2b93a0a3fb6fff5b87a9beac0d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cec5eb2b93a0a3fb6fff5b87a9beac0d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
cec5eb2b93a0a3fb6fff5b87a9beac0d_JaffaCakes118
-
Size
868KB
-
MD5
cec5eb2b93a0a3fb6fff5b87a9beac0d
-
SHA1
05b7981c7cdc57b79822ff3048df1a016eeb9382
-
SHA256
dd03676ee201df158cddaeef704d4ccfa91a244d569da968eef19840e7ed0dce
-
SHA512
e7bb5f0d983c12a55a589d679dfe45e162db6f48b62ece026ff745b12ae802f02d3043594fd801e9bc95582d41b512fff0128d67b2c2c1bde80a18bd6e0fd0e4
-
SSDEEP
6144:5dkkkkkkuadkkkkkkuSdkkkkkkuadkkkkkku1dkkkkkkuadkkkkkkuSdkkkkkkuN:5wawSwaw1wawSwawMynQA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cec5eb2b93a0a3fb6fff5b87a9beac0d_JaffaCakes118
Files
-
cec5eb2b93a0a3fb6fff5b87a9beac0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE