Behavioral task
behavioral1
Sample
89e9135f837e26ecdfe1f900cd571a9a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89e9135f837e26ecdfe1f900cd571a9a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89e9135f837e26ecdfe1f900cd571a9a_JaffaCakes118
-
Size
139KB
-
MD5
89e9135f837e26ecdfe1f900cd571a9a
-
SHA1
52c6f8eb49a780fcc9c85599ba19b4f81cf8cba1
-
SHA256
d32dd1a6d0411b9999c6f62cdbe82d254719851f08e936c5e72cf0883470dfed
-
SHA512
854c8b6083d57d855e8973bcfe8385372f2e4811e470829a6c718b077a92365576d8bb23f428b8caaf1998d59d402acf54c771a880d0a8e895c4d86ea1440d19
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e9135f837e26ecdfe1f900cd571a9a_JaffaCakes118
Files
-
89e9135f837e26ecdfe1f900cd571a9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE