Behavioral task
behavioral1
Sample
b89cff9c4ea055b9f2f454804c4f9c8d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b89cff9c4ea055b9f2f454804c4f9c8d_JaffaCakes118
-
Size
26KB
-
MD5
b89cff9c4ea055b9f2f454804c4f9c8d
-
SHA1
e59ecb77044b78be179159e5a4c9f54d98175d54
-
SHA256
f93fdabe0d8e5da72ba870116d9977a3a6a04a4ce64877db26abcd2cca9809d6
-
SHA512
6d84973af7f4297c002f44d21a2b3a085b76c547ed887e537a25b0b717a1b006cf3027b0b19a85674454ec9b52361ce46c872f07590c747e1a3d61a18bcb3a51
-
SSDEEP
384:AdTYiOfWibA7exeW3HOsxPNP71k4dTYiOfWibA7exeW3HOsxPNP79:ABYiIbUegW+sxhi4BYiIbUegW+sxh5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b89cff9c4ea055b9f2f454804c4f9c8d_JaffaCakes118
Files
-
b89cff9c4ea055b9f2f454804c4f9c8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE