Behavioral task
behavioral1
Sample
5d358398d557da89699f5ef678c51b17_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d358398d557da89699f5ef678c51b17_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d358398d557da89699f5ef678c51b17_JaffaCakes118
-
Size
496KB
-
MD5
5d358398d557da89699f5ef678c51b17
-
SHA1
5394e427d7c89f8d3712ca0d2b6010bb679ae6e9
-
SHA256
7ca5afd917a5bfa8076eb9aa97fe02096b96eca7fc3480cabdf4d19d995b5c3f
-
SHA512
8c5481452ae41b50a4b7ba0c88f3d144a615ed0ff169d59bf1a9775e9a1ab848f4788fe705837f417bee97c227c21c8099a44c2d7399aab2b4cd3d5bd145bc60
-
SSDEEP
12288:60TteyR9YxeXBi/HZOUEBmC0j/evVgloNw3+cFclboS:60Ttey0xeXBCHZOUEBl0/Xi66
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d358398d557da89699f5ef678c51b17_JaffaCakes118
Files
-
5d358398d557da89699f5ef678c51b17_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE