Behavioral task
behavioral1
Sample
5e04194d8fbe123f93b3e2e7c94f6d08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e04194d8fbe123f93b3e2e7c94f6d08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e04194d8fbe123f93b3e2e7c94f6d08_JaffaCakes118
-
Size
220KB
-
MD5
5e04194d8fbe123f93b3e2e7c94f6d08
-
SHA1
17d6cee80a82f457afd61a0660e06bbb3560374a
-
SHA256
072a50255dcbaee1bdfecef96d7d3a3590abbe911c4cae8670ae56ff6503f5fd
-
SHA512
5b218284fe90c33ca5c19fe2597b0dcc83c977b9f1ffdb9bd81c2e3aece0c91c39656b0558654291e7d8d0cf032144f59061600d22a02fe0835b6cc0e66393ed
-
SSDEEP
6144:xCiwupyLObIlglzg373J99Gvw6ENxiduJzh:xMupOlgA3sI69uJF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e04194d8fbe123f93b3e2e7c94f6d08_JaffaCakes118
Files
-
5e04194d8fbe123f93b3e2e7c94f6d08_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 212KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE