Behavioral task
behavioral1
Sample
5554fbbe5d69131014b6f56536538164_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5554fbbe5d69131014b6f56536538164_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5554fbbe5d69131014b6f56536538164_JaffaCakes118
-
Size
108KB
-
MD5
5554fbbe5d69131014b6f56536538164
-
SHA1
a76d65fed128348251e6c1c60f098d2ca2632202
-
SHA256
68e483060bccb3f25eefb1a5b2518121765df3b718e42d4217d77d624061bfed
-
SHA512
b0136b0188c7092d6612ae3dde18164d0514627560d618d58f19e677ac3d8849aaddfacf8e013880aa5670e2685ebe056d5f9a5b95a21405a889c1a7b39f114f
-
SSDEEP
3072:AG9QimCRI4rDpVcnmnCFNb+licwkXdAsDVjQM:FKiDrDb8Uw/eXdh3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5554fbbe5d69131014b6f56536538164_JaffaCakes118
Files
-
5554fbbe5d69131014b6f56536538164_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE