Behavioral task
behavioral1
Sample
126ffdadd9cb38d46a7cf16b6cd1b437_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
126ffdadd9cb38d46a7cf16b6cd1b437_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
126ffdadd9cb38d46a7cf16b6cd1b437_JaffaCakes118
-
Size
94KB
-
MD5
126ffdadd9cb38d46a7cf16b6cd1b437
-
SHA1
8149b1ba92d93101b6c77d910a37a76781b6bd7b
-
SHA256
b2a62a1ad7477983e23c50ad250926ba0d6b03e23cafa37c287af39f36334015
-
SHA512
1ed7616b22eba78920d0ba78c6098f4b88eae5d846e7109034539acf6fda8227eb780859a1b97db3f1f16c91bf13f5cd12b1c32b7886c2b91cb642b179316844
-
SSDEEP
1536:09t6up0XhUhdIeyhs3R336cBduC+hjEx/ZrvruN2j8Hlsbcpsc:09IupchUoeyORa4uC+hQx/l4L2cp5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 126ffdadd9cb38d46a7cf16b6cd1b437_JaffaCakes118
Files
-
126ffdadd9cb38d46a7cf16b6cd1b437_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE