scan
Behavioral task
behavioral1
Sample
a5934fb97bf7d3205ee0b115d5c46a07_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a5934fb97bf7d3205ee0b115d5c46a07_JaffaCakes118
-
Size
18KB
-
MD5
a5934fb97bf7d3205ee0b115d5c46a07
-
SHA1
6c4d1f7e42bcbe3c13270c99776c6bded2d8837b
-
SHA256
1e2033a5ea217007c7e905cde86d690ee1d4190e765d4507ad4a57ee8a952cb4
-
SHA512
c369cb3ecd850e55bf6e1a36978c7232b508e3f029c8faa3776e9d77f8c50b9bbfd15fbd15127714230045f19761799cd51c8d4422c98cf504b69c4057847852
-
SSDEEP
384:Jbs+ESh+Rs3pNaweGxiEV5N50bMAKfVDSbpX2WAHUmTHEQNE:uuh+RW44F5N5jAKfVGbpmDHUmTHXNE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5934fb97bf7d3205ee0b115d5c46a07_JaffaCakes118
Files
-
a5934fb97bf7d3205ee0b115d5c46a07_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE