Behavioral task
behavioral1
Sample
5d283d0c18f31e48c6447a509488701a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5d283d0c18f31e48c6447a509488701a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
5d283d0c18f31e48c6447a509488701a_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
5d283d0c18f31e48c6447a509488701a
-
SHA1
2b1c416e336507537b4517a19caddc6b4a5ccce8
-
SHA256
d18e6db7e892c12fcc46d4c869037eefc8ed4b039c04d1a1a98c14cb1280a90c
-
SHA512
6db212ceb96ef7e8335451ad481f258efb1e4c9b22bf02712bf36c61da65d74656fb6b4f11f123b6bedcad6317efe750ba286695169c31db65e5148d57fa03f6
-
SSDEEP
24576:V6yHImGq+LEdGk+yDqjNI63If5IGJuV37WbCP7qeeb:5IxLE1Dq6fuAwikqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d283d0c18f31e48c6447a509488701a_JaffaCakes118.exe
Files
-
5d283d0c18f31e48c6447a509488701a_JaffaCakes118.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE