Behavioral task
behavioral1
Sample
f5b0807a0de4338e12ff1b0cc0356f2a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5b0807a0de4338e12ff1b0cc0356f2a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5b0807a0de4338e12ff1b0cc0356f2a_JaffaCakes118
-
Size
5KB
-
MD5
f5b0807a0de4338e12ff1b0cc0356f2a
-
SHA1
d5834ebf298227bf98ed738f80bb464c0d9be1cb
-
SHA256
c1b696f8780485c3886d6dba110f5408fadcb5e2c76e0828dde57401f02fafe5
-
SHA512
f4c09924803603f492f6b55c56fdd1c8dab8a22f2395732a06eca6595e93ea2f85cfec5af278a659881f4d856b594acf0da94d2e07da5ffc018c1e693afd40fa
-
SSDEEP
96:GTj75cXwAxkbknqG4q73W16zlUVoeRfbAO7t7dW6xVLcVTOrBx5ktAs:G/75cXwAxjnqG1rWoaVDXFdNxFyTlGs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b0807a0de4338e12ff1b0cc0356f2a_JaffaCakes118
Files
-
f5b0807a0de4338e12ff1b0cc0356f2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE