Behavioral task
behavioral1
Sample
889ecc85919dc5bad2b4b2b1fde2d4ae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
889ecc85919dc5bad2b4b2b1fde2d4ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
889ecc85919dc5bad2b4b2b1fde2d4ae_JaffaCakes118
-
Size
23KB
-
MD5
889ecc85919dc5bad2b4b2b1fde2d4ae
-
SHA1
7032e3a57e72c32b35d46f37c0ea50be9d21c1f5
-
SHA256
d50e64392d890286881bf760f1998695bfbe1df4ad2b15a04713edb4da7e76e1
-
SHA512
c073b669d576e20cff86e69e7a0371655cdbe218b2217f11e61968449523204ee258a54ed80c5595f2a87d1612f8bbc58a9f0a6bb0c10b7949d2afa4c6bf0056
-
SSDEEP
384:GcjH9j2HGnrXFmUc72eoobxZPLv+wMQ/ytyUzmIvc0UdFwn1g9rR+xm3d:Gcjdj2H6DnOpbTywMQ/ytyb0u8g9rR+o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 889ecc85919dc5bad2b4b2b1fde2d4ae_JaffaCakes118
Files
-
889ecc85919dc5bad2b4b2b1fde2d4ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE