Behavioral task
behavioral1
Sample
5dee43a4bbed2d739a0c433c8ffdde6b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5dee43a4bbed2d739a0c433c8ffdde6b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5dee43a4bbed2d739a0c433c8ffdde6b_JaffaCakes118
-
Size
46KB
-
MD5
5dee43a4bbed2d739a0c433c8ffdde6b
-
SHA1
c35f6b8d59d83033cb83dcea9ddb3e2aa2c6a71b
-
SHA256
ab6f46d2f90770814171075e481a382316d4182ea8bfb0a923e495dcdb6d635b
-
SHA512
0c6699c51bd6604a5802569080abdb1db98c56d5be56f58e3348cfb7775488f2e5ae76097ad8e49eeda80c6c89e564a98b2431b36069183de3a492ef33b00364
-
SSDEEP
768:oOdo7RyjD2NAXYc8d5DYs+n6aam0iSbsQRmvKn013qL6G5bzHWybU0mFkGUnbcut:oOoRy3EVcaYsZa4gomvKn016Lx3mNkHZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dee43a4bbed2d739a0c433c8ffdde6b_JaffaCakes118
Files
-
5dee43a4bbed2d739a0c433c8ffdde6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE