Behavioral task
behavioral1
Sample
89e5f11e03b8e18a9e1a95de18504811_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89e5f11e03b8e18a9e1a95de18504811_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89e5f11e03b8e18a9e1a95de18504811_JaffaCakes118
-
Size
18KB
-
MD5
89e5f11e03b8e18a9e1a95de18504811
-
SHA1
56d2f0d854e67cf2dff8b955b1cc796890463c1f
-
SHA256
487fea4b9ae9cba8c5c1b3a6f31a9bf8f4f7d7793a8c882da4ad7514a64443f7
-
SHA512
04d6946b2cb8166e38bd699290f1f464b8874c5131d0b3734865fa5b0a0c9c4a537b8dbf556a1828993901c2b69a19c2875b114cdc3ebc70d6a987c8b01f8115
-
SSDEEP
384:89gvjI4NJLWzofzJDmj1g9ZVrCDQG/DFj+uy:8qvjI4NozWRW69ZUDQ6J+B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e5f11e03b8e18a9e1a95de18504811_JaffaCakes118
Files
-
89e5f11e03b8e18a9e1a95de18504811_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE