Behavioral task
behavioral1
Sample
89b16b7a722de7a95615a9df03018649_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
89b16b7a722de7a95615a9df03018649_JaffaCakes118
-
Size
784KB
-
MD5
89b16b7a722de7a95615a9df03018649
-
SHA1
941f0e49d80e0f3bc7f65847e0ef2aaa866a1e76
-
SHA256
54df8637cc8c98915d3529d208f8e218caed9b5da58debd63cef0de8bb47bd67
-
SHA512
ae81db262c700bd12a9c7c6baa0ae3b33f20500f587a092a2999b85aa0569b872671b0c88fcf36441f50dee1e71e5653469f77a89d1aeffeeb12fa099405d3be
-
SSDEEP
12288:i0va7k4iSaK/lfDqJYe0lahltyPvYARz+mVY/WXxUbxmXj6F+w:zekMxlOJYiO3bkWSbxEA+w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b16b7a722de7a95615a9df03018649_JaffaCakes118
Files
-
89b16b7a722de7a95615a9df03018649_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE