Behavioral task
behavioral1
Sample
5d75902a5424e8829d308af91135c47b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d75902a5424e8829d308af91135c47b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d75902a5424e8829d308af91135c47b_JaffaCakes118
-
Size
368KB
-
MD5
5d75902a5424e8829d308af91135c47b
-
SHA1
4b55f65224c8ec94627c2d72ee8077d4a282ab81
-
SHA256
0ff659128d288f628687158bb026002192d9ae20e0fe0db498da794f357cc061
-
SHA512
3b4cdebb4571bfee0a6e0212a53aaa3f6d7577f6b740874e4057f5c9665762ed5ea5208aaee8fbb76def570a901c29cbfbe4ce9dca133601466cba45c2fe980b
-
SSDEEP
6144:VL7jt85qIYBJiD0YboNaDv2LojulWBXbEn6qXEc61xabQ74x8njdOqtCqQeohDRo:VL7jt85AJIHXv2L2ulAbcz38abQ7oqt3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d75902a5424e8829d308af91135c47b_JaffaCakes118
Files
-
5d75902a5424e8829d308af91135c47b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 360KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE