Behavioral task
behavioral1
Sample
a4e54ac17f8a8cb720d9078b66713a1a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a4e54ac17f8a8cb720d9078b66713a1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4e54ac17f8a8cb720d9078b66713a1a_JaffaCakes118
-
Size
12KB
-
MD5
a4e54ac17f8a8cb720d9078b66713a1a
-
SHA1
ea0c3d363b2d95b20d1945c0b04c07c61fef675a
-
SHA256
12f717a58e8059f228563b157e362cd17c647d5cb0afa907dbdd4483bab194eb
-
SHA512
ab6b4d9895838722c58278749acc09e056ddc206dc30b57209f063b007d91b2d36ab83df88649cba67d9a463a43d352da4b85c9e609ee5b62067ad04f5439734
-
SSDEEP
192:reEFkEN1mMgMQ7ogagzYvSV1IveVE2un30WvNYySGdPEFxdfoZqjxfpRcr+hRv:iEOK0M9gz7V1IveV5un/vMUCrerwRv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4e54ac17f8a8cb720d9078b66713a1a_JaffaCakes118
Files
-
a4e54ac17f8a8cb720d9078b66713a1a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 365KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.payload Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_MEM_DISCARDABLE