Behavioral task
behavioral1
Sample
52891c46a5cd31f41bb179047931bb0e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
52891c46a5cd31f41bb179047931bb0e_JaffaCakes118
-
Size
90KB
-
MD5
52891c46a5cd31f41bb179047931bb0e
-
SHA1
21e35812662a6d88bb00a2231c7474f95abbb563
-
SHA256
35dbfc3eaba5a7dacc75f83055a7bb619f9bda74cec773ffd8ea580ff9b507f7
-
SHA512
ada5a8dbe1bc8d6068057d206c44f6cfeb72cac9818795ad277d4ba97c31a993df48419b1138aca3c5084334572a65adfdac2e1687b6da11bbcdedc210d4c077
-
SSDEEP
1536:FPw3ReSf1DeQY+mkSy0Q8Yq4g1TNKMGDSjShnouy8eFOZt2:Bw3RRf1Dg+mkTBqBTNhGtBouteF2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52891c46a5cd31f41bb179047931bb0e_JaffaCakes118
Files
-
52891c46a5cd31f41bb179047931bb0e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE