Behavioral task
behavioral1
Sample
5f3936d9659c8c7ecfd51894d77e8034_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5f3936d9659c8c7ecfd51894d77e8034_JaffaCakes118
-
Size
364KB
-
MD5
5f3936d9659c8c7ecfd51894d77e8034
-
SHA1
e05fe2d65040a5c21b6030a84b7d8ff90f3dffa2
-
SHA256
bdb2bdd1be0dcc7786074ea914639ff2a19b8d2815dcf8fc68e59c112e6ca665
-
SHA512
9ba481c7f3ec5db3709a2576b3f78eb75da8e85f33ff528e7fa598617b2bdba98b7cfbb3d4886918038aeb2222e050d3fb5ec02253f9a516d9e145176a7833c2
-
SSDEEP
6144:ndnIz2AMyzRJd7cGyMvNDGkOWXnlzrhPHTJj5o7Aw2x7E2KkeTW3MFoSUc1J:ndnIoyzRXXRv1Wkl3hPH7o7A7EweTW8b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f3936d9659c8c7ecfd51894d77e8034_JaffaCakes118
Files
-
5f3936d9659c8c7ecfd51894d77e8034_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE