Behavioral task
behavioral1
Sample
5fea2db067378332e9abbc49dca7101e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fea2db067378332e9abbc49dca7101e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fea2db067378332e9abbc49dca7101e_JaffaCakes118
-
Size
23KB
-
MD5
5fea2db067378332e9abbc49dca7101e
-
SHA1
6389ccf68080be1c5962c683bed058d58d98e686
-
SHA256
c8ae9864f4ee079dbb18ad37af41dc60f21abd4099071f001a297569d287864a
-
SHA512
41b9a727ac2cbd78b48808d3c62533db475154d5352822a6e1a45ad1fcac9f1773cd069db9cae6e3ee8718e0154d9a999c106b52e9775bd12893f7be3cc84ae1
-
SSDEEP
192:oVLtuefS0nibiXEhA1yHXWDSOU+Ymkx00/LZ/2LI5upssrBAR10yIPyHkL:Aukn8QEyE3KYm000/FeIgssleOaHk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fea2db067378332e9abbc49dca7101e_JaffaCakes118
Files
-
5fea2db067378332e9abbc49dca7101e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE