Behavioral task
behavioral1
Sample
5f4f4520f8cdfb2aa48cc51713079f56_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5f4f4520f8cdfb2aa48cc51713079f56_JaffaCakes118
-
Size
403KB
-
MD5
5f4f4520f8cdfb2aa48cc51713079f56
-
SHA1
d45cf18c4112d7adb714386ae50a7b95a6a22519
-
SHA256
75b8adf0fb8b306ab9b9ff93c280e7fe1c71c37b32e504ff9fd0f565e7e21264
-
SHA512
61d04452d9ad105df453b56597f8f2bc2686453687aba513c30d7795ed7d352e5ceff29fb4fc7a8e4d903a3632e01da1fe6077988af2026565d6c0ec2071267b
-
SSDEEP
12288:OgrkbuawlUZF8HZ5YN4B9rC8jBRqfHHHguNJHl88/oS:0qazP8HZ5YO9rC8j/0HHHgWx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f4f4520f8cdfb2aa48cc51713079f56_JaffaCakes118
Files
-
5f4f4520f8cdfb2aa48cc51713079f56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 396KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE