Behavioral task
behavioral1
Sample
126915b0911298f7442c6cc28a0e601b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
126915b0911298f7442c6cc28a0e601b_JaffaCakes118
-
Size
28KB
-
MD5
126915b0911298f7442c6cc28a0e601b
-
SHA1
28150b78c6f9545a3510457728a67e03257e9eb9
-
SHA256
7383c0c2c4ccf5006fb581c17af0d9c4d2cd6f29a555969dfeee056bae788dd2
-
SHA512
607484d20e823e3b918af35a6ccabb352ab9b532170849b95c8e071ddfef1fea4a82188442ad2b8bd059c33f6ebeb3db84fcfe9ce6b4e19e001684e2b8c61740
-
SSDEEP
768:aGcAPQIpz0Mb18Kdt14yvLhlDr/D6nbcuyD7UBTO:S3TMb1FpPtdr76nouy8BTO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 126915b0911298f7442c6cc28a0e601b_JaffaCakes118
Files
-
126915b0911298f7442c6cc28a0e601b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE