Behavioral task
behavioral1
Sample
124fecd3a93bade0aca16ff25105d580_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
124fecd3a93bade0aca16ff25105d580_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
124fecd3a93bade0aca16ff25105d580_JaffaCakes118
-
Size
1KB
-
MD5
124fecd3a93bade0aca16ff25105d580
-
SHA1
b86387d627e18ec342fda0789babf6a719844672
-
SHA256
2f9b745b50a11989344f2827b302576bc41e9a38f014a001cad982b9f938aa7e
-
SHA512
663f9d7e0ae1d6bdcf75108308a3f24e0dcbf83f732a1fe6dce07ee83a558f378e88d65aa5c1259dc916ed2482e5a9b93e7c76f3e8ea8e34d8d458b20ef9141c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124fecd3a93bade0aca16ff25105d580_JaffaCakes118
Files
-
124fecd3a93bade0aca16ff25105d580_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE