Behavioral task
behavioral1
Sample
5630a2f20a792f3c7158a995740f9261_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5630a2f20a792f3c7158a995740f9261_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5630a2f20a792f3c7158a995740f9261_JaffaCakes118
-
Size
51KB
-
MD5
5630a2f20a792f3c7158a995740f9261
-
SHA1
8f3c0585d44a4249b278cff97bee4ebd8e3db917
-
SHA256
5625c27e1e02db348f7c3280caf1c73a97f941571c74becf93a69c075a6b1a92
-
SHA512
64dcb2941aaeb4d72012a877be557714f99010a9b498a4819771e6367a0f2ca6129907e8274e52f739e9b7a08d56af7bcca0ba4a6de76f524cf75d5f504d4b1b
-
SSDEEP
768:y7kPeHHvOQbK3YHFAQEIo/fRrjgHzNLLLfs2HiWNdCiqYGEJeWxtCe56ZA:y7uKbK8FByfNW/TCWNdCsG8CeES
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5630a2f20a792f3c7158a995740f9261_JaffaCakes118
Files
-
5630a2f20a792f3c7158a995740f9261_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE