Behavioral task
behavioral1
Sample
00012f4cf0076af25107e8748ed81c31_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
00012f4cf0076af25107e8748ed81c31_JaffaCakes118
-
Size
365KB
-
MD5
00012f4cf0076af25107e8748ed81c31
-
SHA1
14a78beae08c81639a3491e46d6b5629fab03b03
-
SHA256
b005bbf0c2c4cd057906e670327542c5a7f0c1797014bce6c24d62933220adcc
-
SHA512
197d42725e302d2a389286274cac1c85d26830f7a584a139ebc6eebcea4e38270a9bbd6b6dab85d39f2b277e5955b40972c00074db51f69373d5bc7ceb2707cb
-
SSDEEP
6144:ZHPwgxBZu/I/wSpy3wwXQ02lW8aGMeKhlEXg1OEPllntQrghEQbZwCRaouGiQwTf:h4c/7MwwXX2wlshaFrnOrgFbCCRsn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00012f4cf0076af25107e8748ed81c31_JaffaCakes118
Files
-
00012f4cf0076af25107e8748ed81c31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 354KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE