Behavioral task
behavioral1
Sample
5c1bdf7d1c42d66cd1aa5fa541d7cbbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c1bdf7d1c42d66cd1aa5fa541d7cbbb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c1bdf7d1c42d66cd1aa5fa541d7cbbb_JaffaCakes118
-
Size
12KB
-
MD5
5c1bdf7d1c42d66cd1aa5fa541d7cbbb
-
SHA1
8c1821cec4fc7cdf11e9384a90618747d3e4de07
-
SHA256
60513fb0d8a19f7561fbd68ef5bfbef6dd7896f7a6ba23e7fb41f5f1a62ef29c
-
SHA512
fe83cb30d87fb1962ccf59c91e4a47cb11af44a5dd43504ddd9db44323a58536e4aa5385f17a131efc73c84660f0e21add0101904baf9655770cdbec5cc148be
-
SSDEEP
192:CIkw8aC0Z3uTIGbyL/cQ4YGBnlBTFvo/04qcB6bdhSz46OXddIxa4sy6kp:Cbw8E1Kb86nlJRo0AadUz46OXdducu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c1bdf7d1c42d66cd1aa5fa541d7cbbb_JaffaCakes118
Files
-
5c1bdf7d1c42d66cd1aa5fa541d7cbbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE