Behavioral task
behavioral1
Sample
89d2d8ae30d2f84728531c8eac0474df_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
89d2d8ae30d2f84728531c8eac0474df_JaffaCakes118
-
Size
221KB
-
MD5
89d2d8ae30d2f84728531c8eac0474df
-
SHA1
48e3faa652d7b76f5b1a35b914d7b60772d81e3c
-
SHA256
f791f721fe52561f1ab2c0de46d2bdca6305d7e4f42cadac7b5378e8e8f24b7b
-
SHA512
12d996025c3b827ef5fc93f5bc0fa556a06a3bcb8f244b233dbf893cacb92ca59ed5791190596b8a91903e8718c163001148f641daf2eb532b17a37161ac9e9f
-
SSDEEP
3072:pZ86hQKp5xcjRCjxP+MlHoeh4ji216NI:pitKp5xcdCjxtlHoRiTN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d2d8ae30d2f84728531c8eac0474df_JaffaCakes118
Files
-
89d2d8ae30d2f84728531c8eac0474df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wwlxvpx Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE