Behavioral task
behavioral1
Sample
c89c2511f350c8ddf52b1ee2cb5f1f38_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
c89c2511f350c8ddf52b1ee2cb5f1f38_JaffaCakes118
-
Size
293KB
-
MD5
c89c2511f350c8ddf52b1ee2cb5f1f38
-
SHA1
bd4e53cf48a5077d6d4d247f893dd1b231f8e1ec
-
SHA256
2f84f5979651084b072325627ee69107651e644cdca3da3380c6a440cbd607b1
-
SHA512
e70efe3bcb50f3daab2f766ad5a48e34c9975dfc5d4ec695c11fc90fa846f41ee20e9d5cddf8d3d56af86f26f6d42033e1ffa15d43a40d6a2837ec5582bea98c
-
SSDEEP
768:YFtQZY6vpdFdm60NAFyB96Eb/lF06LSj9wuKJTVxmiTVHh5yXT3:YFSnRdF0NOqQEb/b0h9mTV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89c2511f350c8ddf52b1ee2cb5f1f38_JaffaCakes118
Files
-
c89c2511f350c8ddf52b1ee2cb5f1f38_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
eon0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gth1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE