Behavioral task
behavioral1
Sample
5402bd6583913404b643476307a6cd2a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
5402bd6583913404b643476307a6cd2a_JaffaCakes118
-
Size
235KB
-
MD5
5402bd6583913404b643476307a6cd2a
-
SHA1
3377ea0aa5de15bf50320ca0c2c5ae9a95e3c8cc
-
SHA256
a3f6d16b97e9083f5a493125ea7c0ddab0fa4ea72ae7c446a855d17a1d2837fe
-
SHA512
60ff7831efa442605c0218e0c594593117cf09aa03a0c2eb775cdbe2d8b16e9483b1403c26f1c7649bb2f0c59b178e8ed08ff9c2331305dc0de3719a0486b106
-
SSDEEP
6144:Op5/Y3ay6kulL2iAgCHkveC4W3LtXmppVD8Z18jNQtR:+dI6dtAZHkv9btAVD8LrR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5402bd6583913404b643476307a6cd2a_JaffaCakes118
Files
-
5402bd6583913404b643476307a6cd2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE