Behavioral task
behavioral1
Sample
5a7d4bfe0be25700d3a400883cdecdc0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a7d4bfe0be25700d3a400883cdecdc0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a7d4bfe0be25700d3a400883cdecdc0_JaffaCakes118
-
Size
359KB
-
MD5
5a7d4bfe0be25700d3a400883cdecdc0
-
SHA1
7c3737c823c91fe38049bc0f3a819bb338bd0d59
-
SHA256
216793e42e0490fb94d7a8b6156f6f85ba810a8f0600777d49c9a819a32aef28
-
SHA512
de20d3f3f386c56b45b5c6792c46df54a816390be115c6d88f2f0763ef47c202cfd0326bb248ecef7a0286d660720c1efdd2447fe20946397e3be7b151f3f1cf
-
SSDEEP
6144:ZgRyiIWQFpUv4/B+FrM144XlzKlUAzYYbuewX79GtPuB8PxwPh79i5s/CoS9iP6z:3iMCv45+uK4VKXknewr9GBY85wPTi5sa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7d4bfe0be25700d3a400883cdecdc0_JaffaCakes118
Files
-
5a7d4bfe0be25700d3a400883cdecdc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE