Behavioral task
behavioral1
Sample
89fd525feaadf76d434c55726c4184b7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
89fd525feaadf76d434c55726c4184b7_JaffaCakes118
-
Size
1.0MB
-
MD5
89fd525feaadf76d434c55726c4184b7
-
SHA1
8c07531393f3a47035e89b5c3f292f47b4e3beaf
-
SHA256
450e6ea03cfaa212c12c75ee7b9ed72ac895ae209c13bee4a8fa6ee74819ca8c
-
SHA512
2ed0f6c34bf79421cf2ce8b8747a5f09611f256724a33c6c625f37adbb1853b41a575232de608a3637833a6dde3a5f9c24e07c85a62303d47c80dac7be8caeec
-
SSDEEP
12288:WzL90nof+ogCJk4x4jNL2ooKfgG59BLijBW1u7qCtHkzuj6gq9BLijBW1u7qCtH0:5iHgC7x4ZL2oB9SBxax9SBxa5b/EJK9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89fd525feaadf76d434c55726c4184b7_JaffaCakes118
Files
-
89fd525feaadf76d434c55726c4184b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE