Behavioral task
behavioral1
Sample
d5fcf8e3b380c064b6fb4c8a33e62e16_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d5fcf8e3b380c064b6fb4c8a33e62e16_JaffaCakes118
-
Size
71KB
-
MD5
d5fcf8e3b380c064b6fb4c8a33e62e16
-
SHA1
033f435d73f87021f56cce56895ed785edfaeb1f
-
SHA256
55ff53e3983b857737f51fa03ba97e4e050dbb1be2d8fdb439cfe96b30845740
-
SHA512
5ced5f9a22edb2123916597a6c0f0027147bd951b1362cbbd88640f8e7b8e312d809ae8145a84cd0b5bd350d3b5efa703f140d50802417d44b80e56eaee5065d
-
SSDEEP
768:ptaWs6EBfG+RfvionLkqnAdKxh/zLYic/YZyUg21xUfTU4Pr3T74iAD3x:val6EI+RfZkqAdk/zzXuggr3T74iADB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5fcf8e3b380c064b6fb4c8a33e62e16_JaffaCakes118
Files
-
d5fcf8e3b380c064b6fb4c8a33e62e16_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE