Behavioral task
behavioral1
Sample
5ca4188c9f542b701d8e356a215ad062_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ca4188c9f542b701d8e356a215ad062_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ca4188c9f542b701d8e356a215ad062_JaffaCakes118
-
Size
656KB
-
MD5
5ca4188c9f542b701d8e356a215ad062
-
SHA1
4831de022ea923cacb9e418bb53983d51506414a
-
SHA256
04d6f4e89c4ea073fa38b7fd7ad990b554b594e54b6bd5ad445a1174a73caa03
-
SHA512
ebf2474155f5a2c08f2063e77faef28eb0bea0804e3abaeef98ddd99dbf5c43a34a1c92cacabd2ac8dc9aaf8fac688236dcfc79988f1c3f234c3349fbd66728b
-
SSDEEP
12288:1p8w5ebOwe2pdd1Dp9zHqJuTHbLwfDAV8v1KaRJV14q6W/vK+mfd0mjavoS:T8EebzLd1fzye78cV89bTX6gveq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ca4188c9f542b701d8e356a215ad062_JaffaCakes118
Files
-
5ca4188c9f542b701d8e356a215ad062_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 645KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE