Behavioral task
behavioral1
Sample
5390e3fe56cfc23ab84f2de5d069d770_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5390e3fe56cfc23ab84f2de5d069d770_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5390e3fe56cfc23ab84f2de5d069d770_JaffaCakes118
-
Size
417KB
-
MD5
5390e3fe56cfc23ab84f2de5d069d770
-
SHA1
f57dd8fb8c14753344aa85abbae859a6cf3d8b34
-
SHA256
a9d57ed71e5115c31c5241f126f71e68f9c8c5aa4b7536c83a54a7707a371992
-
SHA512
cb7e9b4e6b28221e1afc2c5cf4514a225d001a544b64f2aae5ec1900eaecc0581f5f1f5b8f45d1f837e5fa00af8c5b801e07f3b4ec7ed7b2470be45b597f3e40
-
SSDEEP
12288:1URHornTEmG1K0n75vyOXxBG6llM4OYykZr37:gornTu1n7RnXS6llM+ykx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5390e3fe56cfc23ab84f2de5d069d770_JaffaCakes118
Files
-
5390e3fe56cfc23ab84f2de5d069d770_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 446KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE