Behavioral task
behavioral1
Sample
5a7d3a965def9fcdd52b9a1f21b2226e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a7d3a965def9fcdd52b9a1f21b2226e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a7d3a965def9fcdd52b9a1f21b2226e_JaffaCakes118
-
Size
201KB
-
MD5
5a7d3a965def9fcdd52b9a1f21b2226e
-
SHA1
5bd8d673cdb364529620b84163780ad736c59679
-
SHA256
f1c0d5815a6786b547a2fbd932c29163583f588f60fb245510e42e02d0182070
-
SHA512
0b44078dce169bb28b3e7f56f26a91bd43c1802ac932d569d773603d69cdcf9aba2caedfdb78716e165cbf880524e2eb857b3e927126a387c61e87fdf731566a
-
SSDEEP
3072:GFXLcJdVgCG7pA0CVqbVdRPaxEOvOh2YdE8:2IsCnsfRPae4Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7d3a965def9fcdd52b9a1f21b2226e_JaffaCakes118
Files
-
5a7d3a965def9fcdd52b9a1f21b2226e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE