Behavioral task
behavioral1
Sample
d012c2e17dfe864efaeb63071deab7f3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d012c2e17dfe864efaeb63071deab7f3_JaffaCakes118
-
Size
452KB
-
MD5
d012c2e17dfe864efaeb63071deab7f3
-
SHA1
3fca9063d6de4b9868236d43291959bfa28f8428
-
SHA256
1ed6d58f91a36f5a2c4e0b7f9f89c5ce590fe730ae8c7add388f7dcd110c8b62
-
SHA512
e7d8e5e8639245d43f448385a4128e525f7b4eadaa1203018a84248ec35e7d5355e87842a891ede8bcfccf99f91f89baff9e88c67cb3dbf7d40457c7153c9c5e
-
SSDEEP
12288:I+qrBuYEKmrJjPUAGw1fGABfuS5I/TjFe3q:xuwNDGrRS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d012c2e17dfe864efaeb63071deab7f3_JaffaCakes118
Files
-
d012c2e17dfe864efaeb63071deab7f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE