Behavioral task
behavioral1
Sample
5b9adda39658bdc0d4f1897192e3531c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5b9adda39658bdc0d4f1897192e3531c_JaffaCakes118
-
Size
784KB
-
MD5
5b9adda39658bdc0d4f1897192e3531c
-
SHA1
c8ed2c036c1a11526c006764c6fe6ae4a12beefb
-
SHA256
7e02c31fe7309d36c22f0980c525b36f9998aedb606032ee0855820b95f48b11
-
SHA512
b13f3bb107f0d459dfec0670519f410362602ee5752ada85a6dd2f10aef03f655d1bba1658d39c8b7b8f5f71c4b228956c9c3253ebea52bc38747b0fc26f567c
-
SSDEEP
24576:wZtQldEkBS1pRTwknFKAlfhCSpp6UpnuNE9NqU8p5kXfwJ:wZildEkBYwfAlfhtr6UBuy9Y5p2Xfw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b9adda39658bdc0d4f1897192e3531c_JaffaCakes118
Files
-
5b9adda39658bdc0d4f1897192e3531c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE