Behavioral task
behavioral1
Sample
5d020542c535497c48fe5cf3a4fbedbe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d020542c535497c48fe5cf3a4fbedbe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d020542c535497c48fe5cf3a4fbedbe_JaffaCakes118
-
Size
24KB
-
MD5
5d020542c535497c48fe5cf3a4fbedbe
-
SHA1
4f19894a63ebe503ecde63c4c6944bcfc85125b9
-
SHA256
cc575f99907d5eb768702c6e98a9f96431e915de67311930ebf5f7ed70cf54ce
-
SHA512
5207b36537bf019319c3020b97adef33da40841be8fa29c54be947caecf5aeea330548b113dbc201023256c54265ee2d6a9c25857a0afaacf5a07d119c15ab88
-
SSDEEP
768:n2oxOGO7kaUSZ2wzJ5d4h6Vyo/qG5mj/v49:2ox3jS1J5dQ6Vk/vK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d020542c535497c48fe5cf3a4fbedbe_JaffaCakes118
Files
-
5d020542c535497c48fe5cf3a4fbedbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE