Behavioral task
behavioral1
Sample
5a521e139494b4c9c1e5a753494898b2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a521e139494b4c9c1e5a753494898b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a521e139494b4c9c1e5a753494898b2_JaffaCakes118
-
Size
25KB
-
MD5
5a521e139494b4c9c1e5a753494898b2
-
SHA1
30614a7d93b0f30ccb91ae16627e0e3e834ca98f
-
SHA256
5ca033f79682072eebd08b9346fef7ca25dff1c1eae5972e57c4f95f65ea5c84
-
SHA512
757c5fbbb8136f3f285272f3e373e58cb047aa499b9e1e4cc3e830d490e7ab0bcd0f1a29370cb4a94922731c37d629c02f62ae2bb6246a83cdf9196aa09761ba
-
SSDEEP
384:JyVtIW7qcT/X+ZvHzNU7b69g2fg9rcJsvusdCKDM4KDp3KDhs:coPcCNHzNGb691fgYsd2Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a521e139494b4c9c1e5a753494898b2_JaffaCakes118
Files
-
5a521e139494b4c9c1e5a753494898b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE