Behavioral task
behavioral1
Sample
5e19356410a325f590bf787994f0e3c1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e19356410a325f590bf787994f0e3c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e19356410a325f590bf787994f0e3c1_JaffaCakes118
-
Size
745KB
-
MD5
5e19356410a325f590bf787994f0e3c1
-
SHA1
32d3a83c50394d36ed6e895cd2e0303694514944
-
SHA256
a9e8a58a87d591b6912b738401cf8175ee8f822ccdd989e2a15dd1b17e92fd9a
-
SHA512
7f36f4532e8d6deb1b4405cdafc8c2500e7f4a18aeb0ed08afcd4cc820a78ba280f100934ad96c6860965d7f118fc3620453374d60f52d893ee0b7c661c731a8
-
SSDEEP
6144:GWZfec9EbXDk6RkQKDE2EZ/UOPSe570Szp35nmy+g4lObiZKDAX0jH0o2zq9DmQT:3ZWtI6RkQyOB0+zbiZKm4H8zq9FjtdX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e19356410a325f590bf787994f0e3c1_JaffaCakes118
Files
-
5e19356410a325f590bf787994f0e3c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE