Behavioral task
behavioral1
Sample
5b72be1cc1ee2c83e75f26348634ceef_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5b72be1cc1ee2c83e75f26348634ceef_JaffaCakes118
-
Size
784KB
-
MD5
5b72be1cc1ee2c83e75f26348634ceef
-
SHA1
8741f679938cf845274e5fc1012666146af0425b
-
SHA256
349b1419f410434ac377978c3664d1696ed7f2b506267d317577788f36c30e50
-
SHA512
252334da9df2936604c1d5f878ea46fe51623f0f4ecd4c62bb934aa8f8147ad79f78bbfaf07f7dfa57a24286fa5c6a8d3c40a3d97f93741e6c336f4ff743453b
-
SSDEEP
24576:GrFjOhK06BtZBvcILLovae8ceVQ6ASvc:Y4cBZHze8ceOD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b72be1cc1ee2c83e75f26348634ceef_JaffaCakes118
Files
-
5b72be1cc1ee2c83e75f26348634ceef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE