Behavioral task
behavioral1
Sample
5cf439ec7b6ee6e80fae834f4629dfc1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5cf439ec7b6ee6e80fae834f4629dfc1_JaffaCakes118
-
Size
784KB
-
MD5
5cf439ec7b6ee6e80fae834f4629dfc1
-
SHA1
4b082f29822f9b0b15c21f01d47ae579af2e6b24
-
SHA256
ff0f83eb53e708f4017d41ee80223da154de252af26ed1d26dd1e46381a640ef
-
SHA512
cc4faa041fae00a14af46a95ba0e65e7a0ed6be9c705f85acaed2ce437d8238885f47454ed006cf9ac270a609d06d050921f16d7a259c8bf4ec3400d2cf9a950
-
SSDEEP
24576:MZO8Tv6hjaoo8CPPfyEHVZSf3HBFOff7q++5VNnO9DT7kk:IO8TOW8CLSf3hFOm+S+b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cf439ec7b6ee6e80fae834f4629dfc1_JaffaCakes118
Files
-
5cf439ec7b6ee6e80fae834f4629dfc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE