Behavioral task
behavioral1
Sample
5ba63a7e6e6092581e1451c1562a7edb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ba63a7e6e6092581e1451c1562a7edb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ba63a7e6e6092581e1451c1562a7edb_JaffaCakes118
-
Size
8KB
-
MD5
5ba63a7e6e6092581e1451c1562a7edb
-
SHA1
08633eb60aacbc01412bb7d5042ed0d5f8f2d020
-
SHA256
c2619b081229e248670843bda1660b0abecd2b6f15cfcdeeb896c16688aa11ac
-
SHA512
5a5a00de1f549b4fb2aee89cb73cd07ebcfa5a1283a347b37b5e15cd0f40763b8501094f4705cade04626654759981d1ed83b4d88ce390e822b1ebcd1729e5e9
-
SSDEEP
192:Ih5d5qLq3ZOFX2ADx450411u9CNjKXoeLR0yOFIawTalZzCP:SVJOJX1e00ALoeRawTo2P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ba63a7e6e6092581e1451c1562a7edb_JaffaCakes118
Files
-
5ba63a7e6e6092581e1451c1562a7edb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE