Behavioral task
behavioral1
Sample
129f05b344dd31aafdbaf6c526cb0c1e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
129f05b344dd31aafdbaf6c526cb0c1e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
129f05b344dd31aafdbaf6c526cb0c1e_JaffaCakes118
-
Size
65KB
-
MD5
129f05b344dd31aafdbaf6c526cb0c1e
-
SHA1
d52b87ac6e9acb2a7807054144f02bd1446d9ff5
-
SHA256
a11bab398fb82194ea87b4931635a98b29eb3324a6b79a8839baf387e862cb00
-
SHA512
1e327e0cec867048f18adcb4662d62b41acfac35ef1ee2368cd2d6d14533939cb89241995c3f5d6dd36e4e59f9d2c39ea55beada38c645a442c136d1c1722d12
-
SSDEEP
768:sjyzGg013oBENiHFnxbZB/C4kf4h3IkU83ZFpmNmz:KEN01YwiHjdQ+W8pFwUz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 129f05b344dd31aafdbaf6c526cb0c1e_JaffaCakes118
Files
-
129f05b344dd31aafdbaf6c526cb0c1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE