Behavioral task
behavioral1
Sample
5c1ee3b84c194ea26d8b98f4d0ece495_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c1ee3b84c194ea26d8b98f4d0ece495_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c1ee3b84c194ea26d8b98f4d0ece495_JaffaCakes118
-
Size
873KB
-
MD5
5c1ee3b84c194ea26d8b98f4d0ece495
-
SHA1
0e4e81f740f9ba437a4351d1a42b8b2b0e4bc550
-
SHA256
548ba9c4e9f81898f0952797d9083f8da2255a2d4a224affbd4ff2640aa3595c
-
SHA512
f7f123249768a7b838cb82438b327959c2685759ec08106c2c7dfc97a39e42da9d777be39b95e81c7bc7d73e667ccfe5d7a66aa2ab1484bba1e0a23d526f132d
-
SSDEEP
24576:mkMI89ao8CpNjexOE6KSswNDMbeKPCvlQ4FWnJ+S05eE:+IrAZeD67swJMNelDWTo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c1ee3b84c194ea26d8b98f4d0ece495_JaffaCakes118
Files
-
5c1ee3b84c194ea26d8b98f4d0ece495_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 846KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE