Behavioral task
behavioral1
Sample
89b680a202eb6e0fecd47407bdb46b8a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89b680a202eb6e0fecd47407bdb46b8a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89b680a202eb6e0fecd47407bdb46b8a_JaffaCakes118
-
Size
880KB
-
MD5
89b680a202eb6e0fecd47407bdb46b8a
-
SHA1
3c5b11f859b3204ca5ef5d33f8eb54e5ee9aed3f
-
SHA256
c890054db2465e0391ae39a55b67c36ad34a5893206e5002e23ba8c915d1e830
-
SHA512
4cd9c4574268fc0b124f2db5051304e658f6c187180830e8d6a2333ad33437b676acd257662d10ec07da926fe8e80cc189a6f94aa36384b21c3920eb389af49e
-
SSDEEP
12288://riXOOHLA9ht4CYYiFIA97hY2WNSaudCcnkCi8aV8pxbgOu1vg56kb4y8G830TK:O+OHM9H4nXhFtWNwMaaqrbvM6ZzHDuC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b680a202eb6e0fecd47407bdb46b8a_JaffaCakes118
Files
-
89b680a202eb6e0fecd47407bdb46b8a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 861KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE