Behavioral task
behavioral1
Sample
5acce0ce8ef2949f457dd33db67cea02_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5acce0ce8ef2949f457dd33db67cea02_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5acce0ce8ef2949f457dd33db67cea02_JaffaCakes118
-
Size
75KB
-
MD5
5acce0ce8ef2949f457dd33db67cea02
-
SHA1
f8efdf6c8414d652c363ef4a0434ddd8b22e6d15
-
SHA256
161bb7b6e8df725b5701db7ca2d2a39d9bb0730bff4997dd2a1ec04f411dfd33
-
SHA512
c00b478e6598afbaac657742346f7b6c5e54b5e8466a169e141f7f0a957f53d6c96057ded447c56b5ea9e0be5edc68bf91cea492e9a8db6f92377694e0c26168
-
SSDEEP
1536:o8W3JrJBRPOQnEz6hQ8kDxs7MsyQ2XWBrwTnouy8BMJ:q3SQc2QTqAsj262outBMJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5acce0ce8ef2949f457dd33db67cea02_JaffaCakes118
Files
-
5acce0ce8ef2949f457dd33db67cea02_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE