Behavioral task
behavioral1
Sample
5ef2a8213f6b8b25c4760e2b7d9d22e1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ef2a8213f6b8b25c4760e2b7d9d22e1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ef2a8213f6b8b25c4760e2b7d9d22e1_JaffaCakes118
-
Size
121KB
-
MD5
5ef2a8213f6b8b25c4760e2b7d9d22e1
-
SHA1
3f56fb0ad5012b8dc8ed2d13b6ee8f890d281dc8
-
SHA256
f886c3ffd547b36e548b0d3fd8e2490a336543cafe99f7b7303f5e7bfd5e67a0
-
SHA512
b9367bb10eafd9eafc1a67a00940620d7ccdc6a88a96be8454162457f840c4e4986807657d46db11c05e18e446c6d7753ba1fa7f64fa070b9c1c0bf6002c7525
-
SSDEEP
3072:i2ATxPIZlQ80ceLfF4NBXlc3XtZIDeYhoutjZbG3:MdPqu5sXlcNAboSV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef2a8213f6b8b25c4760e2b7d9d22e1_JaffaCakes118
Files
-
5ef2a8213f6b8b25c4760e2b7d9d22e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE