Behavioral task
behavioral1
Sample
5ed8cf34360b4c9480d709cbc300b2a2_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5ed8cf34360b4c9480d709cbc300b2a2_JaffaCakes118
-
Size
784KB
-
MD5
5ed8cf34360b4c9480d709cbc300b2a2
-
SHA1
e94f29fb23ea90f28d0fa7237919a7a3a4fab29c
-
SHA256
9421d36abdc0306454683fe42b451cab336238e5acc2611e3966c72887491939
-
SHA512
09e5ec98cefc8441df79e676e381e07a89795bbc84310c1a46cfeaf3a4519c03e3f5b823fe7ac578f4fc949899df072c6481592a12252c69e2fd9d10cd1d69c6
-
SSDEEP
12288:4lD38Vz+AEGwN/a2URNVvMPalE6LCcOq/Xju1eQFpARLuyJHcCMuyIoomUR3v+:KIVSGwN/6vdF7/XjxKAtRMuy+JRf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ed8cf34360b4c9480d709cbc300b2a2_JaffaCakes118
Files
-
5ed8cf34360b4c9480d709cbc300b2a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE