Behavioral task
behavioral1
Sample
a012cebfd35637af8967b249b862e966_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a012cebfd35637af8967b249b862e966_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a012cebfd35637af8967b249b862e966_JaffaCakes118
-
Size
4.4MB
-
MD5
a012cebfd35637af8967b249b862e966
-
SHA1
f2c24907cd78ad2f13d4cc96987a4309b066b673
-
SHA256
1052827cea587be5098cb19103774fec83ad31fe7c2ec7883f54273d4863d28f
-
SHA512
d0b26652dc4308f910e7006cf25d7229831ae1e6acbd180481cc666e939e0615a55eaf003590c5c237894789a11a0fb54d0231cf8d88042fe9faeaafbecc4ca2
-
SSDEEP
98304:10qF0Fwf0+0qN/G7wHwl0qH0F0Fwf0qNGxkwHwBwl0qO0Y0qC0mR2wF5wl0qJ05R:1rdf1WMQlFqdfMXQml4z8JFulXlf8EvA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a012cebfd35637af8967b249b862e966_JaffaCakes118
Files
-
a012cebfd35637af8967b249b862e966_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE