Behavioral task
behavioral1
Sample
89c2ce554b67f02853d8f9d0d5314f6d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
89c2ce554b67f02853d8f9d0d5314f6d_JaffaCakes118
-
Size
456KB
-
MD5
89c2ce554b67f02853d8f9d0d5314f6d
-
SHA1
94e380a3ef6a9887fb047723d340d3c48ebe6b3a
-
SHA256
59a55aec23a13e1d22e54966a9655a5adbd36bf2b7510f611a3224a1eb32dad5
-
SHA512
02eea17302e4468ad3c6c0a9be0f1d041b89d89e7700fba970d9d834a73851cba43e48e69c19157b2eaec1c90a937bb112f81863b16a3ae6046f7ca5f2329794
-
SSDEEP
6144:WgRfcLMVKhWr7HhBvHSnSj0Bdu8vS6UOiVJoHYLN5jCGMGmlOzEMj2vaLop3SGG6:RmUKhI7HhBQvWHNCGMGmsIMBY3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c2ce554b67f02853d8f9d0d5314f6d_JaffaCakes118
Files
-
89c2ce554b67f02853d8f9d0d5314f6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE