Behavioral task
behavioral1
Sample
5f747e23e577ce03eb8019a5cb313314_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5f747e23e577ce03eb8019a5cb313314_JaffaCakes118
-
Size
784KB
-
MD5
5f747e23e577ce03eb8019a5cb313314
-
SHA1
7756bf53f28680d8bd53f6f2be43bd7664deca5b
-
SHA256
048a2c74aba86ddfc7d0f3f808b26f7898cbcecbc68e0b86b74bd986686df9ef
-
SHA512
2a767632e3433f109697fa9a1dbf68b0aab157a57d092c0a11f6e612864800d599ec1bc51925de17e0956fbf577b544ca4c46f3c916fd111f0fed35e91699111
-
SSDEEP
24576:8vrms/RxAdhNruGGnD5alxdCsmf+yp325nzNncA2:2RxAfZKnD5IQX+QwzBcA2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f747e23e577ce03eb8019a5cb313314_JaffaCakes118
Files
-
5f747e23e577ce03eb8019a5cb313314_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE