Behavioral task
behavioral1
Sample
5ccabc6d02d5cbb26a8a783bc6e0e33c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ccabc6d02d5cbb26a8a783bc6e0e33c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ccabc6d02d5cbb26a8a783bc6e0e33c_JaffaCakes118
-
Size
778KB
-
MD5
5ccabc6d02d5cbb26a8a783bc6e0e33c
-
SHA1
9879c36cdeab9616fb74862194863d18706838a2
-
SHA256
773d14fec14b41b788375f2c14fc42b50d03cef2b2d221ffef5a4ee09f0877b9
-
SHA512
e45edcb8600c88100186b530c4a005dd8b9c528ee2937bf5a9b6f0a611c7adaf25b006a1a566fda60fe490aa2271ec153cf82f67af04b060141d602e0b2c0d5e
-
SSDEEP
6144:GWZfec9EbXDk6RkQKg/UOPSe570Szp3b/UOPSe570Szp3/uHOr/UOPSe570Szp37:3ZWtI6RkdOB0vOB0fOwOB0vOB0e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ccabc6d02d5cbb26a8a783bc6e0e33c_JaffaCakes118
Files
-
5ccabc6d02d5cbb26a8a783bc6e0e33c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE