Behavioral task
behavioral1
Sample
5b68b73ca4242523a4656f5e15b3fcbe_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5b68b73ca4242523a4656f5e15b3fcbe_JaffaCakes118
-
Size
784KB
-
MD5
5b68b73ca4242523a4656f5e15b3fcbe
-
SHA1
d3630ea7bae57936f7236509e441d6a2a5516732
-
SHA256
ea7fec1eaff9033c0382625949db674c004bc0954a29824107c7d3e565c75db9
-
SHA512
51f6c4a4490fafbda9c12d7e99db0a74546dbf237dd934955cfc5d641995bea8dfd7c5716ad6423344d34e1b6b35a1bb36fc85344df88933566404ad74815b5e
-
SSDEEP
24576:EX0LWGF+4h9F60GJNT73LUiy1seugP5wO:EX06GFBzFq6icseugB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b68b73ca4242523a4656f5e15b3fcbe_JaffaCakes118
Files
-
5b68b73ca4242523a4656f5e15b3fcbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE