Behavioral task
behavioral1
Sample
5348209d3375057bffa53082186857fe_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
5348209d3375057bffa53082186857fe_JaffaCakes118
-
Size
466KB
-
MD5
5348209d3375057bffa53082186857fe
-
SHA1
cfb8183ea632674422f24653c4fbf35ba1d59b72
-
SHA256
f03853e6a60ac7e59cd946cddff3dc4b060a77295660014b3a8732db417b4799
-
SHA512
17f090f8764016567b27296c89934da51155c08a7243f1bdb35c2a0a7fe1cc7c0fc69005c5e34a31fee96c00d2851c1656e2663486589e0598f617f6f7870aa5
-
SSDEEP
6144:+baQ0/Vc+USl3eYjDZ63Q34Dk9lf85306XZoy:+bJuUajl63Q34DSfE30ooy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5348209d3375057bffa53082186857fe_JaffaCakes118
Files
-
5348209d3375057bffa53082186857fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE