Behavioral task
behavioral1
Sample
5b723c33dbeb1dc270d731ce2f5f86f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b723c33dbeb1dc270d731ce2f5f86f5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b723c33dbeb1dc270d731ce2f5f86f5_JaffaCakes118
-
Size
146KB
-
MD5
5b723c33dbeb1dc270d731ce2f5f86f5
-
SHA1
266d1f83e8c98a985bf6a806e213f5505a65e78f
-
SHA256
7bd90e84fae9e5f274705f7b787bf71112b8bcffc1edc41a281e7dba0296fa6e
-
SHA512
3459c9ab60718bd458b0ba7c7782fc11b0a0f8856f7e25ba85b175f87118eac02ef71bff77378898a90df51561c7f14087ddd1f57bf272fbcda37735dd925e60
-
SSDEEP
3072:4n7kqSZ3JINYnbfVoajrHVaTslfJpr3Ct5HtqrqJQ4S6BKouhat:4YqSZZIunbdrmslfJR+HQ/6BKoyo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b723c33dbeb1dc270d731ce2f5f86f5_JaffaCakes118
Files
-
5b723c33dbeb1dc270d731ce2f5f86f5_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE