Behavioral task
behavioral1
Sample
05d21ef1e0f3046adc47dee8fdd9dc61_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05d21ef1e0f3046adc47dee8fdd9dc61_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05d21ef1e0f3046adc47dee8fdd9dc61_JaffaCakes118
-
Size
331KB
-
MD5
05d21ef1e0f3046adc47dee8fdd9dc61
-
SHA1
62d0018f390c99733c1e6b37da7f03ab04ac56fb
-
SHA256
8678c8a4e18d981b30042b6460c9224d0ffc36464f1abce9503f8da0aeb2753d
-
SHA512
10efee8660c60c563754865aa6f0d1878d73854e01a428d97a1a411876463831e48887c72a32d588b58e47d7891bb857b356c4a6b73d5781ba95f71265630476
-
SSDEEP
6144:SVxR9keB+9cSVt5HNQePWBiM/1T3ObOr+vaXDbGqOTlcyJqh21hCvtIen:2Aek7tNWYMtT+6rbXDK/OyJsQwBn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d21ef1e0f3046adc47dee8fdd9dc61_JaffaCakes118
Files
-
05d21ef1e0f3046adc47dee8fdd9dc61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE