Behavioral task
behavioral1
Sample
12584dd598d825be86f07bb8cb30b31a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12584dd598d825be86f07bb8cb30b31a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12584dd598d825be86f07bb8cb30b31a_JaffaCakes118
-
Size
785KB
-
MD5
12584dd598d825be86f07bb8cb30b31a
-
SHA1
10efd8e9d144f1196b6816b5f5aa79a37d2ade26
-
SHA256
d4c0c2eb52184d58445963afeb85cf9b7721f70884dd028f5416c859fe9645f5
-
SHA512
1c73dbf680131b46983ec778a7d59dac0eb30300436dfbcda32e6ccc64c37bf3b2bf2393e7982c3c1e62033ffcbd4949532d136804ac7283177ab0297791ff56
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH5WV5HANUTNBHANUNEu:jt0VPFfsKAkrbPl5u5HANUTNBHANUNEu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12584dd598d825be86f07bb8cb30b31a_JaffaCakes118
Files
-
12584dd598d825be86f07bb8cb30b31a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE