Behavioral task
behavioral1
Sample
5c3621eb8000f08c0bdea279683ef06c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5c3621eb8000f08c0bdea279683ef06c_JaffaCakes118
-
Size
28KB
-
MD5
5c3621eb8000f08c0bdea279683ef06c
-
SHA1
258bf2a405d1cebcd3292c4de78230deda2ae04c
-
SHA256
a28e9f9a3f2ae8984582d87f3b2f95f3c78e3fc68ff8951ecb1ffb8a763111eb
-
SHA512
27842995e7c22711c858642784c1500d433fe533aac547e6e508850e26e8fa238b230e56b365225c8ccd79b9e16f088ebd1a3e8c98b41a54fa75e7073376a0a4
-
SSDEEP
384:4OQ+d+Lv10/T1lg+exi62QJzDymazGyPRJOCpP0mhHZXqMEfG5aNJawcudoD7U4:4Fe/Dbexi62QJnymxKamCtpnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3621eb8000f08c0bdea279683ef06c_JaffaCakes118
Files
-
5c3621eb8000f08c0bdea279683ef06c_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE