Behavioral task
behavioral1
Sample
5f6cb812be3ec4212236d9801741467b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f6cb812be3ec4212236d9801741467b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f6cb812be3ec4212236d9801741467b_JaffaCakes118
-
Size
145KB
-
MD5
5f6cb812be3ec4212236d9801741467b
-
SHA1
846c130e115589cf89720a8075f37c489fc59673
-
SHA256
199fa222bffd6989f5be16c19472f321217f85d94170171407689699a19cebec
-
SHA512
cc6d105991c40748e08a24c6439c305667ee8b9840b92074b32c26384811fd8e3b05e3f53cc81ffa7044d2c9d9c6b24e8662ef2498c7e28387b3a85134381368
-
SSDEEP
3072:6NGLsJkACHxYf4Szr6pE9whGUz/BV4FOkRV8Evvbizd:6YKuYjQ/BV4Ft8ODiz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f6cb812be3ec4212236d9801741467b_JaffaCakes118
Files
-
5f6cb812be3ec4212236d9801741467b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE