Behavioral task
behavioral1
Sample
5a5d2936aac19f97e1f69eabbe49cac1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5a5d2936aac19f97e1f69eabbe49cac1_JaffaCakes118
-
Size
784KB
-
MD5
5a5d2936aac19f97e1f69eabbe49cac1
-
SHA1
d1f40d503752a0c5f773327762ad0581458a74c7
-
SHA256
a80015b223d7e55ba9baef88badeb4de0e79616e37b0b6b64a6b938f387b6318
-
SHA512
01fb1e61df2494936121093641865ebbc35a1d4629c95269dcf7c98e77e64ac6b7776f8bc2a5c7af08a078bd18b0efd477294c03712f3f2054acf28e96909490
-
SSDEEP
24576:W9nmbOG9D/OwvNK7FkA9lOoeqkD/rFBFyPXpj:qu1N/OwkFuD5FBFO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a5d2936aac19f97e1f69eabbe49cac1_JaffaCakes118
Files
-
5a5d2936aac19f97e1f69eabbe49cac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE