Behavioral task
behavioral1
Sample
5537a9ac60a26d62c2630594d00ea920_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
5537a9ac60a26d62c2630594d00ea920_JaffaCakes118
-
Size
89KB
-
MD5
5537a9ac60a26d62c2630594d00ea920
-
SHA1
b7edac7779ec096c0af4467e5989534385fa6ea4
-
SHA256
7ae76bac149f73fd10e80eb4c3fef282962b4909d28bf3fc9f5c9937c437b727
-
SHA512
1f3521090a2e78057f49223529070ae7b85c1264ff6e99baf84ce243c9c254e2b006c7ca9a6a47603b2f9db36e0e1a81da923faff2c0d966461c0f11944c3c41
-
SSDEEP
768:re2nbcuyD7U/FkmUamn8EeIC4ZzqhLIhm0mn8vvFSn3alztg:vnouy8dpUao8EfCOzO8m0xvvonq5tg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5537a9ac60a26d62c2630594d00ea920_JaffaCakes118
Files
-
5537a9ac60a26d62c2630594d00ea920_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE