Behavioral task
behavioral1
Sample
89ab65c6a04313fc2db1cc5eca1ff6b5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
89ab65c6a04313fc2db1cc5eca1ff6b5_JaffaCakes118
-
Size
784KB
-
MD5
89ab65c6a04313fc2db1cc5eca1ff6b5
-
SHA1
080267b21d758fb54b3e313da481bb44ed1ec545
-
SHA256
461aa2eb70befb88c8280d6c56f671b906741630bed0feae9ed21552e5b39fcf
-
SHA512
3d1d8e5dd84042b6aa5014e820f28f03cd635ecdaba8da89781a45204d1062d53385162c9228ab4e9df826e53519f0c9ad60b2f7977b835c37a415e6abc2862c
-
SSDEEP
24576:Vuq82lUIagy6Mebzoqvkhmb8CRJd0OSB9Jc:Vu0Crgnoq8hNCR0n/c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89ab65c6a04313fc2db1cc5eca1ff6b5_JaffaCakes118
Files
-
89ab65c6a04313fc2db1cc5eca1ff6b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE