Behavioral task
behavioral1
Sample
12be82e8cefecd3798fb36027ad3877c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
12be82e8cefecd3798fb36027ad3877c_JaffaCakes118
-
Size
234KB
-
MD5
12be82e8cefecd3798fb36027ad3877c
-
SHA1
c27295620a655e1a8ac5eb2ac022964a2db213a3
-
SHA256
a7cedee03835f92e4c2efe66eccabbfa28ab20ed94dde5af329e49abfcfa0d27
-
SHA512
e1e72bff653ed7c1b8c13cdad351715208d2ae7c90c107854f289e7a3593531190ce5f83fa97797b06c6db02e4054db1ea56ed80de7ff982898b22e9663bc7c1
-
SSDEEP
6144:2xV8dI3bxRETtXaz/OJepymej5viyT5O/q9DUGEyoSR:2n8dI3b7ETtKKepymejF5aeDUGNoSR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12be82e8cefecd3798fb36027ad3877c_JaffaCakes118
Files
-
12be82e8cefecd3798fb36027ad3877c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE