Behavioral task
behavioral1
Sample
89b4251ce3c7c61817ff8e98a2868e56_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
89b4251ce3c7c61817ff8e98a2868e56_JaffaCakes118
-
Size
645KB
-
MD5
89b4251ce3c7c61817ff8e98a2868e56
-
SHA1
f73f17a51107d5ddfd88bd1d1096bcf6ee5979e8
-
SHA256
5b4ca06209a876cb6e7920f9e53f473682df7d41207845c8b6031e9c04e0812d
-
SHA512
50dd76a99743391852f56c903bd66ce53de145030bc3b10c8ce9e2f0707d9d8a9b340069e2f7c4749a9020e6012934f90ea2c0b5ecf5d4363a398930fcd43ef3
-
SSDEEP
12288:/ZaeS8fwWHQu2UQv9MhPKhveL+p810lSA2AA/wir8BUSMhfh:haeVIWHQH1Oh+v8+pA2SAQr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b4251ce3c7c61817ff8e98a2868e56_JaffaCakes118
Files
-
89b4251ce3c7c61817ff8e98a2868e56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 618KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE