Behavioral task
behavioral1
Sample
5a4b37ba1f748aca6765c40340ea0abe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a4b37ba1f748aca6765c40340ea0abe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a4b37ba1f748aca6765c40340ea0abe_JaffaCakes118
-
Size
89KB
-
MD5
5a4b37ba1f748aca6765c40340ea0abe
-
SHA1
5b544efccf586e04702e8c210231fa5888201972
-
SHA256
038e61eb7b9ef120c61f2f7e856d2d49d8e2fbef3cfc3207129b4bf725e7ea39
-
SHA512
36732d939877a228e6932e2b56bac89eafb4d38684df8a23a877530fbe9f5d7b7e9b9eed21067801842c70c60b8f2cdb0361a06fee464d312c5a3a79ab2c2f75
-
SSDEEP
1536:WcY2VfTfYBQZEcIPTbcTgwlN9Z3TsQsAJoLmw9pozDcjkBIWULsrSgNuHv5l:WcYyfjA47EbXWRTv03oEYBFUYrS2uHRl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a4b37ba1f748aca6765c40340ea0abe_JaffaCakes118
Files
-
5a4b37ba1f748aca6765c40340ea0abe_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE