Behavioral task
behavioral1
Sample
5bbcd157619ffe8709cffad8dc36c9f2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bbcd157619ffe8709cffad8dc36c9f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bbcd157619ffe8709cffad8dc36c9f2_JaffaCakes118
-
Size
469KB
-
MD5
5bbcd157619ffe8709cffad8dc36c9f2
-
SHA1
63fd97a7f2425234fd481feefb250c884e13fc26
-
SHA256
a87af6586df759fda3e1a13a6694d7c6a16609bb104843ab2d700d319e7a3979
-
SHA512
fbd523458539fcf40e02058689292a214c0a664735fd5ea758604b4528874dbacd8cb9e4cf5495630f3e32c5f7659cd7a9b21c7d73b9fa578094c10f243f62d3
-
SSDEEP
6144:pWMWeRUvonw8xiXG2wtYIQze9OvAxcvTt2HpMfOaSSi67QAcLLuWhwjgIDtM+akr:0e+2VOMtWe93xc82zNT0fazjg4apPdSb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bbcd157619ffe8709cffad8dc36c9f2_JaffaCakes118
Files
-
5bbcd157619ffe8709cffad8dc36c9f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 455KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE