Behavioral task
behavioral1
Sample
0aab8bf3ecbcc9198b8f8c9b9cdbe660_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0aab8bf3ecbcc9198b8f8c9b9cdbe660_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0aab8bf3ecbcc9198b8f8c9b9cdbe660_JaffaCakes118
-
Size
37KB
-
MD5
0aab8bf3ecbcc9198b8f8c9b9cdbe660
-
SHA1
f3f6a29180ec8a3bba49a5e19ff7a227ad03403a
-
SHA256
aff31e39e7cdac7b8f0b6c9d4419cb0a3aaf5a2eccb3d3c9101ae90788a3e55c
-
SHA512
2b1a42c9d44fa8e9c1fec7a28517237a211e156adeeef8d600774e20b904d947a9e1ec75a5f1dce9476eca9a36995ba4ee88712fc1693ebe1e650e91c331e655
-
SSDEEP
384:DBXkocaoPBX5Yq5aN6i/U6ee2IexUv/DqqPtL0q:DKPPQYaN67E2IsUvBB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aab8bf3ecbcc9198b8f8c9b9cdbe660_JaffaCakes118
Files
-
0aab8bf3ecbcc9198b8f8c9b9cdbe660_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 743B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE