Behavioral task
behavioral1
Sample
05490cb5cf9b0cee10600c97841a5d99_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
05490cb5cf9b0cee10600c97841a5d99_JaffaCakes118
-
Size
122KB
-
MD5
05490cb5cf9b0cee10600c97841a5d99
-
SHA1
8f16be9059a96bbde748c382a23fd8336a23b7d8
-
SHA256
8e7c78a687fe83dc97501cd7a2c753db030f6d87e3dd75053849757d72d765cf
-
SHA512
f776b552404df33462a0d58ec594e937a25cc4f352561a18098b452bcdb6b5ec060f814ca64a0ace0e359cb0caacccbd96dee275d1bd688051a28a3ba5901f81
-
SSDEEP
1536:mG7VHLE5KiKcIJPxdBvM9azPwN8wGVfIHfkcQrnouy80:FVE56BJZdBv5zPk8gHs7zout0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05490cb5cf9b0cee10600c97841a5d99_JaffaCakes118
Files
-
05490cb5cf9b0cee10600c97841a5d99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE