Behavioral task
behavioral1
Sample
5b5d3188dc4c2d64e5676dcd4d9cfd7e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b5d3188dc4c2d64e5676dcd4d9cfd7e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b5d3188dc4c2d64e5676dcd4d9cfd7e_JaffaCakes118
-
Size
897KB
-
MD5
5b5d3188dc4c2d64e5676dcd4d9cfd7e
-
SHA1
30d05dda5140b47257c9dd69b21a76d52234f777
-
SHA256
fc1cde743d4a59da91a6596111bdc44869cdd29e979ae432693f72fbe075dabe
-
SHA512
c8f5ba6098b3eda6ffe2bb6b4eae5c19fa07f6082a2c3d91e0056898e8ede9bc770e96cfc4c4915fbcfd96c57d84a3d1a7c40d9f8e14c101be0c71f804a4c0d8
-
SSDEEP
24576:K+LgR5Ig89kMX/udI5kvPIX8q5914ITfQae72:La5IX9nX/KI5k3S8O9OI0xi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b5d3188dc4c2d64e5676dcd4d9cfd7e_JaffaCakes118
Files
-
5b5d3188dc4c2d64e5676dcd4d9cfd7e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 893KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE