Behavioral task
behavioral1
Sample
5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118
-
Size
486KB
-
MD5
5d303f6e2cd19b6931abb145bc02a939
-
SHA1
7136c3dbcc36f1ea1f610c9973a0e1cdc90a1544
-
SHA256
22dfc7d2583fb5a70dfcb26e751336f26c4fdfc7632fb8c02f351f8f07ef55ad
-
SHA512
fb607ead83517935249512e384cb5d273b0366446157fc6c78561eb08e40cec9d101e33d0b6de387f03f5dc18a897c7a99f706c7a5370359dc9586406e8d4cc6
-
SSDEEP
6144:yS5yI7Tw9s5ovJNAa1aXK2EFrUCGvRWZzwXxS33T+WK4y/ae+RSm:ymTw92oQArm8TvK4y/aX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118
Files
-
5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE