Behavioral task
behavioral1
Sample
b5ac23988ad5af67644e8e99e9d38b4f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b5ac23988ad5af67644e8e99e9d38b4f_JaffaCakes118
-
Size
784KB
-
MD5
b5ac23988ad5af67644e8e99e9d38b4f
-
SHA1
c2e48c1892b9212cef8abd8e093dd7c86e0d3f03
-
SHA256
8a75ea4ff4b749ad9cb631340e72506a6d4b97d44baae05176374626db16165f
-
SHA512
6f514858e8926629436ab78fe2fdd9371fb363f28745158563b8b85ef729557bc0c129e417fb4879f1cf287d291aa55acbfaef37dfc496242dbe40536dd19b19
-
SSDEEP
24576:FqSloRzsjOkd5fwvMvQ50DB5LUIwILWrP:Fxl8g6I658H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ac23988ad5af67644e8e99e9d38b4f_JaffaCakes118
Files
-
b5ac23988ad5af67644e8e99e9d38b4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE