Behavioral task
behavioral1
Sample
5d23d4f129a295ecdad1279d5df6b760_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d23d4f129a295ecdad1279d5df6b760_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d23d4f129a295ecdad1279d5df6b760_JaffaCakes118
-
Size
1.1MB
-
MD5
5d23d4f129a295ecdad1279d5df6b760
-
SHA1
d8481eba00fe67679cc537e9cdaa0b3f53ec0e11
-
SHA256
efd705f3231aa9f4a14f49ed9173f20a662140c90803edf9cbf28679b2c7239c
-
SHA512
449cda2f3e12cade330b64ead5206943e28edfdbc3773fe940b6e386351bc7b0bbbdb4d5a1b27716f8853be9e3fd4aabfd3c1fa16437a112a9225fe4eaad2594
-
SSDEEP
24576:fqwhc1eHgV9JHS3Dh2GFf+WEMMC0vHf2eS3rADuorJQctG:SwhccUToh2I+WzMC0v/2VkKoruuG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d23d4f129a295ecdad1279d5df6b760_JaffaCakes118
Files
-
5d23d4f129a295ecdad1279d5df6b760_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 18.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE