Behavioral task
behavioral1
Sample
5c1f537af8e46a0b692382bdab565a24_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c1f537af8e46a0b692382bdab565a24_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c1f537af8e46a0b692382bdab565a24_JaffaCakes118
-
Size
41KB
-
MD5
5c1f537af8e46a0b692382bdab565a24
-
SHA1
7a886c3a23b02f41108ccff21829b83748f5451f
-
SHA256
ffbf4887962948347bb205be9ac9f34431c329f2e1da3d3234e3a570663a7877
-
SHA512
92e96587fcf29ef9b6866ebaffea1bc974764ef800b5a09b1321c45ddbb0a608d68e6555a1b8a3b791b74b7acbb20177837966969d2755381c2a9b6e166b9d40
-
SSDEEP
768:t8li27Qgnlj6/xZCd1VIiuSwCxXtHCTpEnbtiVA6nAJshNWSmEnbcuyD7U:2dJxnVOSwadHCTpEbt2RNWLEnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c1f537af8e46a0b692382bdab565a24_JaffaCakes118
Files
-
5c1f537af8e46a0b692382bdab565a24_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE