Behavioral task
behavioral1
Sample
f5e73f95c050ca49bd3d2b516dff6c08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5e73f95c050ca49bd3d2b516dff6c08_JaffaCakes118
-
Size
131KB
-
MD5
f5e73f95c050ca49bd3d2b516dff6c08
-
SHA1
942539bc047684de1164d1affac3dbea740fdebc
-
SHA256
44e95ab4f9a4669608c2db7fc08ff340f422c17fa85a0278377481f77b9bc5b4
-
SHA512
377673aa82cafd814b734de414945058bc973c33557a6ea34d5b97d01c448494db434ff7c1c8f2788e85026a0abb5d75efda99b87fa55da28abea2e0e65783ec
-
SSDEEP
3072:s+PBm81rGZUfu2CxbG27r+j+sk3ojWKPLyGkGo:s+PBm4kr24b2+iLI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e73f95c050ca49bd3d2b516dff6c08_JaffaCakes118
Files
-
f5e73f95c050ca49bd3d2b516dff6c08_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE