Behavioral task
behavioral1
Sample
5ba0c3361932170d17d075992280f0cf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ba0c3361932170d17d075992280f0cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ba0c3361932170d17d075992280f0cf_JaffaCakes118
-
Size
191KB
-
MD5
5ba0c3361932170d17d075992280f0cf
-
SHA1
6e64872525e2ec8de4ca564b6023cf34ffeba601
-
SHA256
c0a35a4f80279fcbe7a93b8d7833412d3820436162fc165bbf5af3cee9b6c7e5
-
SHA512
5048d2538782b5c075646053f3011dfa0c072988aa6567a92a4ca0bab3d6462f9f98678bac4825d4c127526ab8d769b1bc009f76dc7e6b1c393ff16c9e41c9df
-
SSDEEP
3072:dkvDaVufmr/yjqdXYiqzowTdZ3Anoc2WUQbiQ+sUM+KwqKHohQCObUolKwRgOC:O+Vufmr/y+dI39TdNAJ2WLiQWKwqKHoh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ba0c3361932170d17d075992280f0cf_JaffaCakes118
Files
-
5ba0c3361932170d17d075992280f0cf_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE