Behavioral task
behavioral1
Sample
5d26b7322dd4d8de4e8c2cb4e7f7d2f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d26b7322dd4d8de4e8c2cb4e7f7d2f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d26b7322dd4d8de4e8c2cb4e7f7d2f0_JaffaCakes118
-
Size
407KB
-
MD5
5d26b7322dd4d8de4e8c2cb4e7f7d2f0
-
SHA1
1afb6fbc101ac1d40be9c59c85af838a6d556c3c
-
SHA256
e472e7a4d672ee5bf125545518f44497b83168249ba2792cc9387700c21f0e4f
-
SHA512
1f6f6fec9605bdbe91400d7426becbfd435ec6c2f6e5cddc2bbf00744c0932b8a864d75862083ab14e9e846c0caf397fb59976d57de1513be77fc75a58cc0bbb
-
SSDEEP
6144:Bxov71WpHywAjKZ9t3lfr6m2MObxyTliR4LhddBLG4F8k:77pHka3lp25X6hddVGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d26b7322dd4d8de4e8c2cb4e7f7d2f0_JaffaCakes118
Files
-
5d26b7322dd4d8de4e8c2cb4e7f7d2f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 182KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE