Behavioral task
behavioral1
Sample
a5333dc63f21a5361a316c64281a0fc7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5333dc63f21a5361a316c64281a0fc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5333dc63f21a5361a316c64281a0fc7_JaffaCakes118
-
Size
210KB
-
MD5
a5333dc63f21a5361a316c64281a0fc7
-
SHA1
15468f1395f94d803c78271163ed60db426b8e0e
-
SHA256
cf918f0fee16046bf6c44c7dba78f5517e912119716a39a4c0a65c8213216f21
-
SHA512
c120a947f6a2c931a8d947293845cbe13cb44aa7a2b3390282a13b40c87087974781b727744c12ab1358d717c27a6af3ca0cf939a229263f125c27e9fe0d3e83
-
SSDEEP
3072:PXAZXVVYFq4ooMCT7ovzjbzro0ys81vIWRlydhxpAkA8tzr7IVg5yUROPFRauFF0:PX8XnYFNGbHo1PZAtH7VvAPF1Fsci
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5333dc63f21a5361a316c64281a0fc7_JaffaCakes118
Files
-
a5333dc63f21a5361a316c64281a0fc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
520mmym Size: 20B - Virtual size: 20B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ