Behavioral task
behavioral1
Sample
890b441af39b620fec2229e525c11f10_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
890b441af39b620fec2229e525c11f10_JaffaCakes118
-
Size
966KB
-
MD5
890b441af39b620fec2229e525c11f10
-
SHA1
ce04c3c1d358f7c9a5a2e4a340a746ffa9a66a56
-
SHA256
c4faa833971e3614091b29c6007d3e3ac5e49c4e0f9a622b9bf05aabe88c55f0
-
SHA512
c74b268b8cc1cb0de567f6d474a217aec4dcb804658b8a08d48a1aca181f93eaa38698dc4caa5de1d9ba2b581430c0bd3b4d14138d348bd6b066a114c5ee78fe
-
SSDEEP
24576:EszvXSwOBuy/OrC5B0zE31h8eKloj15doOB:Eeiv5Og04x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 890b441af39b620fec2229e525c11f10_JaffaCakes118
Files
-
890b441af39b620fec2229e525c11f10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 925KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE