Behavioral task
behavioral1
Sample
a8694af3e161b83066fc7d355ec0dc49_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8694af3e161b83066fc7d355ec0dc49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8694af3e161b83066fc7d355ec0dc49_JaffaCakes118
-
Size
43KB
-
MD5
a8694af3e161b83066fc7d355ec0dc49
-
SHA1
814c1f367de2cac44697d396741f3ac4dee5c3dc
-
SHA256
959bedf105999fd84ea24b3ef8926de74a8a01f5ffade3be289c6ca6390b248d
-
SHA512
1ee65ab3929435cd29f4ae1816c861df05c711c462678ec4b1ba7cabeb2b319f8d3e83e9d5fc455595f93d541c5251ed61540620c8bf97a4239699bc953a0650
-
SSDEEP
768:x81xchN9GYjxb6yxReBPK0h1QDqhXT3FG+ITxu9La0fE9Zj8h4nbcuyD7U:x81anG0xblxcZhyDcD3FDqxuoAEZ4anZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8694af3e161b83066fc7d355ec0dc49_JaffaCakes118
Files
-
a8694af3e161b83066fc7d355ec0dc49_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE