Behavioral task
behavioral1
Sample
5d6916dbcb67591880e7ec8ee82a4d98_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5d6916dbcb67591880e7ec8ee82a4d98_JaffaCakes118
-
Size
784KB
-
MD5
5d6916dbcb67591880e7ec8ee82a4d98
-
SHA1
19fb37655a408638705e9377d28cd0c89e41c2de
-
SHA256
c0c2d119ca2961d01371f3d54e011f80ee26c2c308f364f51c69d5c965087cc9
-
SHA512
5b2acc2ca9ab7685b037c417c72411d10aa0d27cb093c5e2a258a0dc1f2642a82905af2aea3d55c0a17853c3f0b3f2a52d0b2c9e161dacbb7af9d2d89963773a
-
SSDEEP
24576:8vrms/RxAdhNruGGnD5alxdCsmf+yp325nzNncA2:2RxAfZKnD5IQX+QwzBcA2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d6916dbcb67591880e7ec8ee82a4d98_JaffaCakes118
Files
-
5d6916dbcb67591880e7ec8ee82a4d98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE