Behavioral task
behavioral1
Sample
f5101450d7c0f39cbc7a85231f5443ae_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f5101450d7c0f39cbc7a85231f5443ae_JaffaCakes118
-
Size
322KB
-
MD5
f5101450d7c0f39cbc7a85231f5443ae
-
SHA1
eb882fdb5e409290452d9a04396de6334ef91798
-
SHA256
549b4f8b2d6747268cfb0c74a5099a055db8ae9f3f4218a3fc61ff35f846e8da
-
SHA512
2cf107e05a8c235f8d885e6298124e49181c3290c91faa5935f9ef7e81254453a38baa38afc983d8fbafcf112a656ca2022911693742e652817fba99c63ef7af
-
SSDEEP
6144:xbDu8RGCTLHuutaiIKOcmASBDGwxPA4CI9Cs1Wj70YUJS9J0hodV6mJ6Sg8:xu8RGiLHNIKOc0DHPb9WjgYhyh0M8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5101450d7c0f39cbc7a85231f5443ae_JaffaCakes118
Files
-
f5101450d7c0f39cbc7a85231f5443ae_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE