Behavioral task
behavioral1
Sample
5f89ed1d8b3a54d6dab9d5761bde6386_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f89ed1d8b3a54d6dab9d5761bde6386_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f89ed1d8b3a54d6dab9d5761bde6386_JaffaCakes118
-
Size
405KB
-
MD5
5f89ed1d8b3a54d6dab9d5761bde6386
-
SHA1
e39582c24649ce2477b899d6824bcb521ee7acaf
-
SHA256
f173d4c479093169da86bfb61153618ddee9d371d959188e01e756009ec79ccd
-
SHA512
58a034ce74d76d09557bc29ccffa326ebfa97bdf8807e6b52427b491af3eb0340066e203c4868cdec40f6aa2a1fe6d1ba88c165f58e6d3789f809cf18c312ee4
-
SSDEEP
12288:+2zH0qO7hGgayia6C04lx/+c3R/bhK4D1LlVcM37qPaG7:pzH0LVsavv+cBThK4D1X5qPaG7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f89ed1d8b3a54d6dab9d5761bde6386_JaffaCakes118
Files
-
5f89ed1d8b3a54d6dab9d5761bde6386_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 335KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE