Behavioral task
behavioral1
Sample
JaffaCakes118_5f9d4155858bf995f1120af29175bd40.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5f9d4155858bf995f1120af29175bd40.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_5f9d4155858bf995f1120af29175bd40
-
Size
224KB
-
MD5
5f9d4155858bf995f1120af29175bd40
-
SHA1
b49e28e45ddca86146fb398ad90c7aa9a6c76557
-
SHA256
4ab026da4f0df17224bf190c261dab72f06e40a3b15b44d79fdedaf401f615c6
-
SHA512
044c38007d6705ec01a6faaedad430f1de33ec98fc5de58412e4dd101cd1110f7ec5d5473c736c92e4a57ad76253ec6f3bb8c91dbbc1477a24e4a2cf33507959
-
SSDEEP
3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+J:Po/BHng5HaVG4G/1z+QVMbg1jv+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5f9d4155858bf995f1120af29175bd40
Files
-
JaffaCakes118_5f9d4155858bf995f1120af29175bd40.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE