Behavioral task
behavioral1
Sample
5e5d3f1de76af34a730d41f4d57adcfd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e5d3f1de76af34a730d41f4d57adcfd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e5d3f1de76af34a730d41f4d57adcfd_JaffaCakes118
-
Size
471KB
-
MD5
5e5d3f1de76af34a730d41f4d57adcfd
-
SHA1
0bf7bbd6327fc6bfe508156c148991fd930fb41c
-
SHA256
0aba610ec225fa12796f3a8d071c459fa8f5a17527221c7253b34944c6207740
-
SHA512
e71111ed913a80691759223248e5f140c54c6c5d369fc2a7f5e95f57e967d965c0ebb55bf14691fda8d215b9b6833c9ab72b8f20618ce08908e9f922cfa2a548
-
SSDEEP
6144:UUmGdVgYFHx3f14FoskrHj79E1kZRQis3jWxT9Fn5AfC9EtPfnZ2+/:SkVgMxP6Fo/bakZ+isTWBn5eC9cPfZf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5d3f1de76af34a730d41f4d57adcfd_JaffaCakes118
Files
-
5e5d3f1de76af34a730d41f4d57adcfd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE