Behavioral task
behavioral1
Sample
5c9c0584e63e886fca893c4dfca10fe5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c9c0584e63e886fca893c4dfca10fe5_JaffaCakes118
-
Size
88KB
-
MD5
5c9c0584e63e886fca893c4dfca10fe5
-
SHA1
365420411723f02f6d5e5e270d3140889115c7fb
-
SHA256
5c463ee09756894c9974e66c335c5bd702647c4d0f01457427e4bbb7f87de168
-
SHA512
fd790824458cad9d61a04b1b9e1d8da4c26a5ccf81a3a2091305401ef3182a1badb8ba94b8e69b896dc6c891fb84788adefee1cb5965c8810010cf46f1e8d0a5
-
SSDEEP
1536:3aHuCqoNRz5xBw755AVK207WX4/qkh0ga9DxNrrgozuimVFOyhat0qF:3aGCRhwjAg207Wo/L0ga9Dn3j6dVFOyA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c9c0584e63e886fca893c4dfca10fe5_JaffaCakes118
Files
-
5c9c0584e63e886fca893c4dfca10fe5_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE