Behavioral task
behavioral1
Sample
12e09b0757ad487a777725f0953fd33e_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
12e09b0757ad487a777725f0953fd33e_JaffaCakes118
-
Size
4.7MB
-
MD5
12e09b0757ad487a777725f0953fd33e
-
SHA1
b9d8343df76d932be8e02013d404df866b71267e
-
SHA256
10a94616aa0f3805a5bfbf8dd167b01f40d8791a8dd97585ef8d9dd9629f7294
-
SHA512
e19210ee0f804e406c99bca163a58fb769cc6313b93ec5ddf3bc7bec62ddca0cf80ef95c08195c13e6a9b365f9c4fda3f3378751c9782b369649d176c0e6d68b
-
SSDEEP
98304:YXfkMf4uBFeJ1QleIDHgbAfmQtPUpNCp5DORqMtaUljVUPXnCkyVtFN1Mx:+vQuneJ1QLHavQSpNCPD8qMQUlq4tFNm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e09b0757ad487a777725f0953fd33e_JaffaCakes118
Files
-
12e09b0757ad487a777725f0953fd33e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE