Behavioral task
behavioral1
Sample
5ed98a8c816628732fe540563acfa644_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ed98a8c816628732fe540563acfa644_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ed98a8c816628732fe540563acfa644_JaffaCakes118
-
Size
134KB
-
MD5
5ed98a8c816628732fe540563acfa644
-
SHA1
356d71bb847cbde7ef8d721ae715724f3bb3f5f2
-
SHA256
ee0297332107d6b3c2d4316a283f6ab0baaf5c46cc5916d873fe79e1f701c08b
-
SHA512
f45be945d38f3c054289c7bd600e678784c8fe1b4aff254f9d8efd8c961f067fc63221d00cb795074018a8ba06817c4964ba9c25e49f5fbe90cf4097b583fcbd
-
SSDEEP
3072:EUgLDDq8tu06gjLkjBKJf7l8JnucuBqout:E1O8tus+BKJzlWnuhqoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ed98a8c816628732fe540563acfa644_JaffaCakes118
Files
-
5ed98a8c816628732fe540563acfa644_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE