Behavioral task
behavioral1
Sample
5f5dcaf9e88f13de2287a5cd75f8f284_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f5dcaf9e88f13de2287a5cd75f8f284_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f5dcaf9e88f13de2287a5cd75f8f284_JaffaCakes118
-
Size
18KB
-
MD5
5f5dcaf9e88f13de2287a5cd75f8f284
-
SHA1
799dd3b5641acb71a74b4392efde6900f7b8ea41
-
SHA256
702ac324eb86c95e1d1beade4b1489efe3de60543949e5fc3326c98e73f3c4ee
-
SHA512
af3e13dbcfac38555585406cf9d84acd573262d419ff648d5412a9e771b25667b31abf13b4d669a0e89eb3453b32c738fa50177034769e3e0074d2acf7df088f
-
SSDEEP
384:S0mrMO6XPqzpX8Vg2KCKIEbpI5CCAM66Y73pevF4XS5Z:ygM18Vg2JKIEbI8pUF4qZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f5dcaf9e88f13de2287a5cd75f8f284_JaffaCakes118
Files
-
5f5dcaf9e88f13de2287a5cd75f8f284_JaffaCakes118.exe windows:4 windows x86 arch:x86
87eb14ba60ecda29587478dbddde3c4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcmp
__toascii
_adj_fprem
asin
_chdir
_atodbl
kernel32
CreatePipe
FindResourceA
GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetConsoleFontSize
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE