Behavioral task
behavioral1
Sample
5b1b176c5496572e79e2cd6c0fef5dec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b1b176c5496572e79e2cd6c0fef5dec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b1b176c5496572e79e2cd6c0fef5dec_JaffaCakes118
-
Size
126KB
-
MD5
5b1b176c5496572e79e2cd6c0fef5dec
-
SHA1
338e6bf52a114ebaa41473fcd75e9d8b71cdf313
-
SHA256
dc7e6635d8a19a324d74e9e398fbd7912e07ac48030e7a4e6785490978dd2bb1
-
SHA512
704062de70ef92423539843fae99ee645b234533ac68332f51b39885d642d19d2d6e03e94b3955e4707b8df542c1cfb07d98236a892baaebfa9ce302f4ef0377
-
SSDEEP
3072:vqIRvW54FjS5INdPf3mr3Lmlq7nmmWdskz:vq8a4zNdPf3I3Lml1mWz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1b176c5496572e79e2cd6c0fef5dec_JaffaCakes118
Files
-
5b1b176c5496572e79e2cd6c0fef5dec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE