Behavioral task
behavioral1
Sample
5a46c526eb6d47d6898ee8f36d398687_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a46c526eb6d47d6898ee8f36d398687_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a46c526eb6d47d6898ee8f36d398687_JaffaCakes118
-
Size
237KB
-
MD5
5a46c526eb6d47d6898ee8f36d398687
-
SHA1
58fccdf011ec6e2fa3cfc5b70daef0e350ffe50b
-
SHA256
0343ee99635d20abd835d8b169e4b0cad07d3d70d32f6a7ce198e30cb6ce8ec5
-
SHA512
bd102df9bc91b4dc94c8f4b26e7639266ef7da354534a8be548b465c48afd5035090203a9376b477da4c1e5c1806e775d679f4bdd0b557c6c7a561a01b4c4232
-
SSDEEP
3072:/6Fm+MtOhR2C2fgsEycixSpecD+qrYsBpNbOsCc1Yi:SFpMt22PEycixSUchcsBpxOsCe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a46c526eb6d47d6898ee8f36d398687_JaffaCakes118
Files
-
5a46c526eb6d47d6898ee8f36d398687_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE