Behavioral task
behavioral1
Sample
12b7533c5007e3706b3bdcc395a354f1_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
12b7533c5007e3706b3bdcc395a354f1_JaffaCakes118
-
Size
1.3MB
-
MD5
12b7533c5007e3706b3bdcc395a354f1
-
SHA1
9d34aba7659ad02ff81323618842c87c9e206be5
-
SHA256
29f847716473b3154cdfc485b9f2c509ed928f67fc2abb9681ffc3978a50d37a
-
SHA512
661e7706d7c804393889cb3617b85358d4674bde84f8405f63b7a799915a119c79aa4c71ee96e795ab5481fa77ad5528e4897d0b22f82c2d93db3702afc7ace1
-
SSDEEP
24576:Jdag4lcsvz8R3CpYjnB3XRtDjUjth3cOQ4Rp01z3c8Qi3vG:Xadz84ezxhFjU33Zqs8f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b7533c5007e3706b3bdcc395a354f1_JaffaCakes118
Files
-
12b7533c5007e3706b3bdcc395a354f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE