Behavioral task
behavioral1
Sample
0012b42c054e075e62d96dbb33ee2570_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0012b42c054e075e62d96dbb33ee2570_JaffaCakes118
-
Size
263KB
-
MD5
0012b42c054e075e62d96dbb33ee2570
-
SHA1
2a34869e40c5aab79d34e2c4980dd062c97a15cd
-
SHA256
0ab40a300949130be0b10b3f706502184a273de5350e0d0f53facb404054d9d2
-
SHA512
acfa75887d442cf47931d3e7a57a4fccccf329cfdb487b799f0fe3af490b35e4e7d2a589859aabab65f69b8933708c3e1c4e3d2cf5d86f3068f9004886875d0a
-
SSDEEP
6144:GOkpXJ+4a1S5S+AviiBVOrCUVfsX6kUcGSKEgb7rTl:GOkpXgQ5fAviN/ESVp3bB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0012b42c054e075e62d96dbb33ee2570_JaffaCakes118
Files
-
0012b42c054e075e62d96dbb33ee2570_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE