Behavioral task
behavioral1
Sample
f5cef34c8333eaa3806d834a7e354f57_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f5cef34c8333eaa3806d834a7e354f57_JaffaCakes118
-
Size
1.1MB
-
MD5
f5cef34c8333eaa3806d834a7e354f57
-
SHA1
39c863ed59fc477ea1537ee7349b332fe41cfd14
-
SHA256
f1339fce16cc9b7241a61f61137c7fe13eb39dd472d46bd7349b7686f0861e62
-
SHA512
9f781b5112fed35e8000d1d8841088d5701eca1f55b40dcf882058497681e074b234e0f5aca2b7dae55d97c9d681dc2b2be6575b3a4e3584abeaf2675627fc5a
-
SSDEEP
24576:JecRePNNNGAEq0z2EW+4SNlLT7HBB+90GTZiitNct1MMN:5eHNGAEqDEW+4SNZ6yGTvNct1MM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5cef34c8333eaa3806d834a7e354f57_JaffaCakes118
Files
-
f5cef34c8333eaa3806d834a7e354f57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE