Behavioral task
behavioral1
Sample
5eafcea1cff65c434bcc90bca188e199_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5eafcea1cff65c434bcc90bca188e199_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5eafcea1cff65c434bcc90bca188e199_JaffaCakes118
-
Size
48KB
-
MD5
5eafcea1cff65c434bcc90bca188e199
-
SHA1
5926ac0b1b4dfc03b9bc8932fb237194631b5f27
-
SHA256
2930ec90c6f79809e38af07af5623864c07f852d99f09f9f9dd29dcfe1eb1aba
-
SHA512
eb1a9f152d4e6e0b25a34acf0e15324ce8dac8a29896a70de1951afd79a314f9437115ce43abc15259d3709dd6a702125fe0cb52670b181f6d555963b340fb67
-
SSDEEP
768:4nXB0SGJcPYLz8JS7X8H9ulBnaz+QEUSqNWnR1yKk67ovVnPNwcyazo3g7LrSpp8:MXB0SGJLzISgus1SqNW7yKudPacyaHt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eafcea1cff65c434bcc90bca188e199_JaffaCakes118
Files
-
5eafcea1cff65c434bcc90bca188e199_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE