Behavioral task
behavioral1
Sample
5a7f8d82dcaf3e5e796ea7900eaf5f18_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a7f8d82dcaf3e5e796ea7900eaf5f18_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a7f8d82dcaf3e5e796ea7900eaf5f18_JaffaCakes118
-
Size
5KB
-
MD5
5a7f8d82dcaf3e5e796ea7900eaf5f18
-
SHA1
4d43e82d964cf9bd13230f5e509159f2d1b8ba93
-
SHA256
d272040d94628835b33afca64709cb162cf9a6535d8c74d2d881ca0783d6e374
-
SHA512
b4cb530373bf9fd8a7a7b67d0e8e5ea0d766a0d0f1957aaf1f839b295b5d79f8ab4d7db0823887303dd538b3c8fd3aacea957a84e4eccc150a60b674098ab8d7
-
SSDEEP
48:b1SCLBfs1nA4NavaD+0Lhs71idgceJc8oruqOfXrayueZgBB4dt5ezkZl6S+FP5R:5S8s7siD7e7UrmcrBOjPudsrl6S+FBYO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7f8d82dcaf3e5e796ea7900eaf5f18_JaffaCakes118
Files
-
5a7f8d82dcaf3e5e796ea7900eaf5f18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE