Behavioral task
behavioral1
Sample
c12cfca799ba7291ab381672029721dc_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c12cfca799ba7291ab381672029721dc_JaffaCakes118
-
Size
224KB
-
MD5
c12cfca799ba7291ab381672029721dc
-
SHA1
748066435f30d6459120a153e47b3988df6acdf0
-
SHA256
8bd415c301bb4485d0b5d2096a19afc337ff9a840b8aebecc4d683294235ee0a
-
SHA512
d11483331991075ba713a48e6c4301276ff0ebbcda82eb822e79068f716e15cbd548587a6e613af09c8e0dc10564302aa42f7345ee049313fedeb3ab523caa45
-
SSDEEP
3072:jArAobK2mS7NSDDWQ+Dxk+FfGrcRw37ZP5WtX3X3jHO9iPg:krcI7QakRCw3tB63jO9iPg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c12cfca799ba7291ab381672029721dc_JaffaCakes118
Files
-
c12cfca799ba7291ab381672029721dc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE