Behavioral task
behavioral1
Sample
a20a631f0d4c8a6673aca52b33656d71_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a20a631f0d4c8a6673aca52b33656d71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a20a631f0d4c8a6673aca52b33656d71_JaffaCakes118
-
Size
405KB
-
MD5
a20a631f0d4c8a6673aca52b33656d71
-
SHA1
2436d7d6eb5347d7f5096d5bf8cc0c473b0c4c15
-
SHA256
bac65e6033d9d58b001d585bd3e0d0e4694f7c55ed12a4c8306d6a87a9f631a9
-
SHA512
860eb8a42204c999cc8abfeb397fbd7bc72b92c6a55ebc6b653b4d9e03d085dae3fe0005f5b4db05acf5a08408fcd2695fd0a7ca5f26fcd4b6632af8e2fcf078
-
SSDEEP
12288:AdMyh/5aj2IxsK+bnQzbXxTfHsPaJa6RXtkOly:Xyaawsf8xza6RLy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20a631f0d4c8a6673aca52b33656d71_JaffaCakes118
Files
-
a20a631f0d4c8a6673aca52b33656d71_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE