Behavioral task
behavioral1
Sample
5f15da34b19bb2185796e67e61989d37_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f15da34b19bb2185796e67e61989d37_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f15da34b19bb2185796e67e61989d37_JaffaCakes118
-
Size
198KB
-
MD5
5f15da34b19bb2185796e67e61989d37
-
SHA1
05dbffe5558bfe7e7223064664144c78009a0ed8
-
SHA256
5b389cd6a28b869ea6ae3fe113de3a3bd86187e6839f4c8092d25de4cec5194a
-
SHA512
00b592e9f86a40745a57facc0db088a7e88b0181ba25739690936c053273f18d6fea7f097319a7c2fa908cfe1a9191e8c9044ede2810b8ffeba5757c337c81ff
-
SSDEEP
6144:uT/rnG2ECdiBWwOpDg8PjNxoE+FEN4oS/:unp60FgqJSE+foS/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f15da34b19bb2185796e67e61989d37_JaffaCakes118
Files
-
5f15da34b19bb2185796e67e61989d37_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE