Behavioral task
behavioral1
Sample
51ecc57eeadfc1202c31cd1c5544d650_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
51ecc57eeadfc1202c31cd1c5544d650_JaffaCakes118
-
Size
532KB
-
MD5
51ecc57eeadfc1202c31cd1c5544d650
-
SHA1
5396053ca00a1d07cc20b6e97780df599550d7cc
-
SHA256
78ab230df18f8ffd7846f4a5968c53b7f4a46e22b68fa517c32719a1613e31db
-
SHA512
51ed0463826e52caecd494f3d0c446ec3653d76ae92c3d6fd3e667d39f7c1e95a8919b36cdf5b622a807ee1e057eed68cfa534ba528fa3b1dfc2e02cc70f5f1b
-
SSDEEP
6144:bG/oo8nMH1MarPNb23/hSAAE274YvLCiQtkmlCgfBZPRMfghEwKjDNPYt0tgsU+W:LMNF4evLCWAvPi20x8evLCWAvp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51ecc57eeadfc1202c31cd1c5544d650_JaffaCakes118
Files
-
51ecc57eeadfc1202c31cd1c5544d650_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE