Behavioral task
behavioral1
Sample
f5d511d01c8d722ad4a65571140c3060_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5d511d01c8d722ad4a65571140c3060_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5d511d01c8d722ad4a65571140c3060_JaffaCakes118
-
Size
723KB
-
MD5
f5d511d01c8d722ad4a65571140c3060
-
SHA1
b38af21226af2294d7ae31a1e8a226c73a9ae73b
-
SHA256
105f3c6f464fbe9b3b2b8d047cff9a6525a097f21338c2f981c28863c7be359f
-
SHA512
674d287af857a4ea040ef286ed3cb62bbee2d2e7ce0d3facd63e8b1f382c1e1e1226995d26b231b6ee9e03e0b05cfd8ce2ad9c07a1d527b7fa70d7fb371c073b
-
SSDEEP
12288:UA9Wz5fo+XJf9MwcW4ercDYzKb4T0I2/oYj7hi/lmq/BUoc:Vcz5fDFpcjefTFZO7hi/lm4S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d511d01c8d722ad4a65571140c3060_JaffaCakes118
Files
-
f5d511d01c8d722ad4a65571140c3060_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE