Behavioral task
behavioral1
Sample
a0ecaf50f7bdf7f3646ba69129f6a77b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0ecaf50f7bdf7f3646ba69129f6a77b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0ecaf50f7bdf7f3646ba69129f6a77b_JaffaCakes118
-
Size
5KB
-
MD5
a0ecaf50f7bdf7f3646ba69129f6a77b
-
SHA1
e2b2eacddc4a52547dbf4b9449fe0ae2719222d2
-
SHA256
1cdfffe328aca56185231ac3b67af7f016c050d3089998a875c7b106375127f9
-
SHA512
0e221e74e9212444a3cd40aaaa62098c1601ffa6f17c5b2d10b95b3ac238881064e8a30497ab6377d3c82bfe5a38ad3c4a8de4ad0160be9c74cdf712b7130c67
-
SSDEEP
96:86zsLayr7JRfe0Cl1+M8H8K3+cEtcxsK8kGwRFn6VJ52BwmhEcFZpxedrLzWVg:3sWg7JRfej93mvecx9RhO2BxhEaxezOg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0ecaf50f7bdf7f3646ba69129f6a77b_JaffaCakes118
Files
-
a0ecaf50f7bdf7f3646ba69129f6a77b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE