Behavioral task
behavioral1
Sample
5302837c53eaaac67386b86e537c3e36_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
5302837c53eaaac67386b86e537c3e36_JaffaCakes118
-
Size
340KB
-
MD5
5302837c53eaaac67386b86e537c3e36
-
SHA1
d161e218850507e4d4e74614623eed03da8d1db6
-
SHA256
05d9fc2209e83cd46aa632a1b4e88c170162cdf0f44ced95dd776071425662c5
-
SHA512
c2030722851d85f9c4ded1e5797ce4242a587f8473dabf18d496d7d6dae9eb5670be562e90dd761fa7fedd7e95c5a7ececb3f3151d366b71add221e644317cf0
-
SSDEEP
6144:Pe+IsB9L5ce8gwmXfimVyF9FMx3ELfpaeJZw+vZOqHvKNXvVQeHu0n4DlW:PvBB9L0mX6mPgvs+hOaCNvVQeF4D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5302837c53eaaac67386b86e537c3e36_JaffaCakes118
Files
-
5302837c53eaaac67386b86e537c3e36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 308KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE