Behavioral task
behavioral1
Sample
d12c1528d8e3be11852ba07f86795ffa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d12c1528d8e3be11852ba07f86795ffa_JaffaCakes118
-
Size
805KB
-
MD5
d12c1528d8e3be11852ba07f86795ffa
-
SHA1
c19d5b26dcbc4852de2d711a922b82c67674f328
-
SHA256
7bac00117c9c0838ce68f840fea17fd6ebfe626c645170441f1251a40fc40fbe
-
SHA512
5bf019588c8a8aab8fdbb748e07c39863bb792c520f393896b05bfc27c50f5d5d86eaeb7496858a5a6b16cc72e54abee4d5bb8667921df09bff1d95fefed8b19
-
SSDEEP
12288:lbVi9vQcO40hzEdPMnySaISuz64+m7ecElnFt0D48kT+RsE1g0VnPFFMCjRBivXQ:loO4kLntmqqlFt0D45TOPFFwXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d12c1528d8e3be11852ba07f86795ffa_JaffaCakes118
Files
-
d12c1528d8e3be11852ba07f86795ffa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE