Behavioral task
behavioral1
Sample
5595561332460d2842af4af78b45b208_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
5595561332460d2842af4af78b45b208_JaffaCakes118
-
Size
87KB
-
MD5
5595561332460d2842af4af78b45b208
-
SHA1
cb1e5d64e373cfefabebd3befdaad8dcf1f13f6f
-
SHA256
f7d131304be54a6e353ea21c4cd079327802dd4c737e6b3ccbaecfc464c25b3d
-
SHA512
e79ea97cf424393b9baffa5513ab1ec4bd776a149d66c55b10b7b84c3f5ebfc0ecfc9b087887e45cba776a83c2f7b3aba771b34e5ac0dcd17e7099a8cd5bf12f
-
SSDEEP
384:rXPvi5MGnGzNHSVDaDI1vXI5CgI+x5G2NV9UB0sg25gkOYBSsinlPb:bPq7GhHSVDaDY+Cg/NNV9UPdYnR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5595561332460d2842af4af78b45b208_JaffaCakes118
Files
-
5595561332460d2842af4af78b45b208_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE