Behavioral task
behavioral1
Sample
5cc3b091ac3c1650cb50fffdcbba8bab_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5cc3b091ac3c1650cb50fffdcbba8bab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cc3b091ac3c1650cb50fffdcbba8bab_JaffaCakes118
-
Size
28KB
-
MD5
5cc3b091ac3c1650cb50fffdcbba8bab
-
SHA1
30805da5c4c1b14b80ebb340f5f7ca495abea603
-
SHA256
33059bfb4357a346caea2d80fb3cd87145cc3d20a0e0343e1220236486fa7c50
-
SHA512
c0c099eaab9462fc993075c69a1b3c6d933b09b40126ac90826757fbafa7f68532f3c756fbeec55c9913bac531271ff16c2672ab263d303f102ad2e9fa3f5567
-
SSDEEP
384:BFNLfmb5tKfGcX6l5zN8lXJqa34/XmyBL49REv/Ftg4:BjLfm7T2lXJqS03Bc9REvNt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cc3b091ac3c1650cb50fffdcbba8bab_JaffaCakes118
Files
-
5cc3b091ac3c1650cb50fffdcbba8bab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guruX Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE