Behavioral task
behavioral1
Sample
5a07cf80d30a420598d33d7c8be9dd6f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a07cf80d30a420598d33d7c8be9dd6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a07cf80d30a420598d33d7c8be9dd6f_JaffaCakes118
-
Size
298KB
-
MD5
5a07cf80d30a420598d33d7c8be9dd6f
-
SHA1
3dae2589b175fcca32c858699266a9e9ca248464
-
SHA256
8e1d2c4f8e2fa8651bc8c705cba2ab6fd6611f3d1d9fb78ed1612d6e2a84e836
-
SHA512
b07a26a473a519fad5129762501d864b84049bdb5aee7703340ba421c84500db71c2df0b250db6c1918e1847883592dd36ab01ec308dcdd66eaa3e4b9226d7fe
-
SSDEEP
6144:EK4Bs+/EUIYl6Mn9Uyoq0I/f2jwo6ZLDj4WV4LWOqoCGsUIcOugaFk/DyoSp:b4x/EUL9WG0qf2f6jOftwc/gL7yoSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a07cf80d30a420598d33d7c8be9dd6f_JaffaCakes118
Files
-
5a07cf80d30a420598d33d7c8be9dd6f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE