Behavioral task
behavioral1
Sample
f5813e1f24275fc70947c35334abdcce_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
f5813e1f24275fc70947c35334abdcce_JaffaCakes118
-
Size
359KB
-
MD5
f5813e1f24275fc70947c35334abdcce
-
SHA1
53d0c2b68b89fea4878394898fc2c86eb98c9eb6
-
SHA256
338ece4092cd3b40719dc3da7edca13de490939b5af39c8b9e656660137633fa
-
SHA512
3f48c5352ceae07b2e1e9394af50debaf4bd6fed533949690bd44a4f4f91160dcf628668fb03d22c704952524e5421536b075eebc022c11d9d15a5861f74296d
-
SSDEEP
6144:ZgRyiIWQFpUv4/B+FrM144XlzKlUAzYYbuewX79GtPuB8PxwPh79i5s/CoS9iP6r:3iMCv45+uK4VKXknewr9GBY85wPTi5si
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5813e1f24275fc70947c35334abdcce_JaffaCakes118
Files
-
f5813e1f24275fc70947c35334abdcce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE