Behavioral task
behavioral1
Sample
89b4f3983330df68b05ec33fd25c1165_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
89b4f3983330df68b05ec33fd25c1165_JaffaCakes118
-
Size
149KB
-
MD5
89b4f3983330df68b05ec33fd25c1165
-
SHA1
f93496e531c656914f80964d982f7dbc0528f091
-
SHA256
dd3588163016fe77a55b08f5782450435bc246ac71a2509a16e81d6ba83871e9
-
SHA512
c02b59883c769e772f2fe3713d0e35aca2f65e6913b014437f22de001cba86c0aa7ce26cbdc6a6a6b3c294d8578d12a342ddc8600693cd776653e4d6322c2433
-
SSDEEP
3072:Sgh2e4PWVw2aBc269CJF3KJfiFP/KrqOcAFO/A7k9eT2ouvX:0e4WwBuEs9mIA9eT2oEX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b4f3983330df68b05ec33fd25c1165_JaffaCakes118
Files
-
89b4f3983330df68b05ec33fd25c1165_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE