Behavioral task
behavioral1
Sample
53dbf4c1ed593cea0fbd94e830deaf7d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
53dbf4c1ed593cea0fbd94e830deaf7d_JaffaCakes118
-
Size
35KB
-
MD5
53dbf4c1ed593cea0fbd94e830deaf7d
-
SHA1
3fe5f4e4a1f5d8c531a5d73b8d542ee77460104f
-
SHA256
ca1c7b2686f950c268390472e8a80839cb7b430c874f3e1e0b48e0caf51870a3
-
SHA512
43204a1b26e9c6a848d04b47a893afac761ea016a12b6e102fbc289aa88f6d379c00c24358cfef7b62089463fc0ea673a03b5d80316264c5d4b4e2817d47e893
-
SSDEEP
768:OkvDAmyGMDkFibTzYGCowq3lowgpwshSRkL2AjOOY3wWbeSeVX4Ncy+ptwldB:9AmXk2AHY4dPgpwk59jk3wWCL4NeA/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53dbf4c1ed593cea0fbd94e830deaf7d_JaffaCakes118
Files
-
53dbf4c1ed593cea0fbd94e830deaf7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE