Behavioral task
behavioral1
Sample
89ebfd80388372dc22accca09c4118f7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
89ebfd80388372dc22accca09c4118f7_JaffaCakes118
-
Size
404KB
-
MD5
89ebfd80388372dc22accca09c4118f7
-
SHA1
146d5f36394a0acb270c140b420a51154e8eb5a9
-
SHA256
1e348ca3f3f276089959d1afb3494ccc8565c8fc84073698514375dc1f56adee
-
SHA512
548bfca1662ab5be79531f73cba209dece75db8158209e53e699d5ba034fb5e94aa4aa1f4ee13600dec858e39e87c96513af0f37e0d184627fec394ee6cf2c40
-
SSDEEP
12288:BgrkbuawlUZF8HZ5YN4B9rC8jBRqUXPE8Y+9WYmoS:3qazP8HZ5YO9rC8j/VXs88
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89ebfd80388372dc22accca09c4118f7_JaffaCakes118
Files
-
89ebfd80388372dc22accca09c4118f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE