Behavioral task
behavioral1
Sample
124f7aa04a02cea78f7f85cf4e15d9cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
124f7aa04a02cea78f7f85cf4e15d9cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
124f7aa04a02cea78f7f85cf4e15d9cc_JaffaCakes118
-
Size
7KB
-
MD5
124f7aa04a02cea78f7f85cf4e15d9cc
-
SHA1
ed8c89ce3fe8d2695932ebabf27407b3d7263bb0
-
SHA256
d31a1dc12ccf644b1237407e6065214fb394ba46800f9d0a47038eab6dcf08f9
-
SHA512
2c647adcc58ae5fada1a67d8992c54c90335ef8c81c5521ecf1b2c5e172fcff263066ba3e557ddda9fef182a09d70f5add7aac7550ba714a9c5d49cdbb1b1827
-
SSDEEP
96:Eh1l/YLU72fVU46vl4QAxHTyjCwyDpaQxTPWkx5eBPkAM9r3J/1xyK/Q9/uB/Np:NfYl4tTyERtOkjeBPInoE/Blp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124f7aa04a02cea78f7f85cf4e15d9cc_JaffaCakes118
Files
-
124f7aa04a02cea78f7f85cf4e15d9cc_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE