Behavioral task
behavioral1
Sample
12d5e177d90d5b4e01572a57845d436e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12d5e177d90d5b4e01572a57845d436e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12d5e177d90d5b4e01572a57845d436e_JaffaCakes118
-
Size
258KB
-
MD5
12d5e177d90d5b4e01572a57845d436e
-
SHA1
7dd44cbfc37367a575b2f17b94ecbd0238eeef51
-
SHA256
023256367fa10c7a1dc6e40a554970b5cd549d15da8daf32ad7aacbd0d1bdefa
-
SHA512
b1f3c8423928c9fbf8a33233ac6a7d4314d32895e7ed702719fbaf0674113c39591f38b2dedbb8edd735d729e00d970747b7f5edf6a7bb08cc2ecbd25dc45c66
-
SSDEEP
6144:Vfer9MbBPKxasWj70XhxPFdHyQEDtwsvuW:UEBPKxpWnAPPNEDtrvu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12d5e177d90d5b4e01572a57845d436e_JaffaCakes118
Files
-
12d5e177d90d5b4e01572a57845d436e_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE