Behavioral task
behavioral1
Sample
5bfee3986186ace835259e01fb25ab44_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5bfee3986186ace835259e01fb25ab44_JaffaCakes118
-
Size
108KB
-
MD5
5bfee3986186ace835259e01fb25ab44
-
SHA1
02c2e10d67366ba743863cdb769c3cdc25dd391b
-
SHA256
8149c959d2e4b1a351c9c12d7539febf6dc51e3d8a8239d81d974dee92b45cef
-
SHA512
833b1726f8c7d1261cdaeeca3c079fd444316f991621de5b539923e8945692f8c850315f7b02299e3c3bd5328938fb01153e4f7fdff7a0db3486e330086ce253
-
SSDEEP
3072:GJimwSlD3z+PW8LF43RBN6cIgBQ+E6Rnout7OMYcYYlm:GJnw0zz+gRBAIQ+EqnoS7OQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bfee3986186ace835259e01fb25ab44_JaffaCakes118
Files
-
5bfee3986186ace835259e01fb25ab44_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE