Behavioral task
behavioral1
Sample
5ecb04f86ea338dbad6db6fb429a54ac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ecb04f86ea338dbad6db6fb429a54ac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ecb04f86ea338dbad6db6fb429a54ac_JaffaCakes118
-
Size
462KB
-
MD5
5ecb04f86ea338dbad6db6fb429a54ac
-
SHA1
fd9f09fdc9b5442b6451dc43498d4dc10be1486e
-
SHA256
80ffafeea821f422af4c1629fc81a1d501718a3e13bec5e70994799f703ec60a
-
SHA512
0a8dcb58ed2b628f79f51a8526ce5fab4746701f40849ec97a616b8e2b68e38c9239722e7d53fd0eeb14d54c5315801b6afa5b0866c15a553b264409989c54e4
-
SSDEEP
6144:6ARwLb6+lQwWIRlhjRnafyo/6MOEm5jHUktQ2Ap9htVPiniogX/EaymZnG:6fLu4PNRf9aqo/6bEm5zWp9hv6gX/Pn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ecb04f86ea338dbad6db6fb429a54ac_JaffaCakes118
Files
-
5ecb04f86ea338dbad6db6fb429a54ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE