Behavioral task
behavioral1
Sample
5132c122193ed15e966055c3935bafa8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
5132c122193ed15e966055c3935bafa8_JaffaCakes118
-
Size
4.7MB
-
MD5
5132c122193ed15e966055c3935bafa8
-
SHA1
a4a0eae2fa7137d7bd66cd021f79694ffc08c925
-
SHA256
9ceeff121e9643f197289082d815661a95992d3b3c550779644344c3bd99f2cf
-
SHA512
9e1dfdc93c51f7111070536ac79576d89f7ff084262195daa130ece360880d00802e3af6c707ed37f70b259d2e46b7b42f1fd1afb8a884896c4e8f28e0d8782d
-
SSDEEP
98304:Ae4d8iEityhkhqloaxeq7jhIXUvPBnnom2LSqLyP:nCnyhkhBaxem1tPBn2uqa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5132c122193ed15e966055c3935bafa8_JaffaCakes118
Files
-
5132c122193ed15e966055c3935bafa8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 509KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE