Behavioral task
behavioral1
Sample
b126b9f8e4d0f8c034a75ad23e8f5d98_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b126b9f8e4d0f8c034a75ad23e8f5d98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b126b9f8e4d0f8c034a75ad23e8f5d98_JaffaCakes118
-
Size
550KB
-
MD5
b126b9f8e4d0f8c034a75ad23e8f5d98
-
SHA1
2e2b220b2e9496a783ac402acdf93a6a34458370
-
SHA256
3f90a0492cb78949f2665f608bb2d0d4575469c2bfe1a97ac045817c7b590ec8
-
SHA512
019c028b06d0c0150cd6b678d8798a4e6fcc728d1f6a5854db749b7641f6bd8be63f0ea8c3a41a4648359a4386da32602c044e19560381238cb4fb59163532ed
-
SSDEEP
12288:3ZWtI6Rkru9O6uLeZJys73dOvXDpNjNe8WA:3uhaHeZJ8NI8WA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b126b9f8e4d0f8c034a75ad23e8f5d98_JaffaCakes118
Files
-
b126b9f8e4d0f8c034a75ad23e8f5d98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE