Behavioral task
behavioral1
Sample
b5babedee24f0e13fe5b5bf5c90ebcf8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b5babedee24f0e13fe5b5bf5c90ebcf8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5babedee24f0e13fe5b5bf5c90ebcf8_JaffaCakes118
-
Size
5KB
-
MD5
b5babedee24f0e13fe5b5bf5c90ebcf8
-
SHA1
4f836dcad0d7ccca0c941e16c77a7eed7841aece
-
SHA256
46af120b0ed7c4291b414aac01378195b5f5492f79011183c0977e6206c9e4af
-
SHA512
12c2350c5793aec0b0631cd8e666a34f8f690f16b1e25a0da6a213b9436fbca170ac476ead672359bded90438efb49d61badd1c7be4b4579f614e3c13594ed1b
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKT3jje:DOSp7sChepoC7A5jjMGu4qwnql
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5babedee24f0e13fe5b5bf5c90ebcf8_JaffaCakes118
Files
-
b5babedee24f0e13fe5b5bf5c90ebcf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE