Behavioral task
behavioral1
Sample
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118
-
Size
30KB
-
MD5
5d534e124deb69c5d2e7dd368591fac7
-
SHA1
611e2744c16d0d12b760bf9e06cba1187795f2de
-
SHA256
e3eae85fde93a08a19140a3ea78f8a542dbb841ec188ad8772aec2801b87553c
-
SHA512
7a784e8302fd0dcee6f94b821f6a6e0c2fe217663e9e6a05d49747e8edc6b4f141843526df230a6cdf7eb4ed168019b4b0486755fc23feb359a07617876864c6
-
SSDEEP
384:dfL9KH089nJ3zkhQj41s83xP+B6GEKD/Kx89FIZTZC:NBqvjkhf+8B+B6GrKY80
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118
Files
-
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE