Behavioral task
behavioral1
Sample
aa0241a2052cb74ab0be848a48339267_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa0241a2052cb74ab0be848a48339267_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa0241a2052cb74ab0be848a48339267_JaffaCakes118
-
Size
5KB
-
MD5
aa0241a2052cb74ab0be848a48339267
-
SHA1
411a8fab61b228bfc06bebe17a34548526b02d3f
-
SHA256
4017c7ed5410b9f157b0741d489866b2213774407ccbcb699a5dce13c22d83ef
-
SHA512
55079269bb5b12825a77a0453eef5e469e26521b1d3f8017bfaf3a774ba9f377eef76f63200b22d7f83f092ceec573a59d364076010d1b3f7964eeeb7ec2e0c9
-
SSDEEP
96:KebxlaX5fmvWSKUpACLFzbltVSTuyyJT0Q:KuxUX5fmvBKUptvLDT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0241a2052cb74ab0be848a48339267_JaffaCakes118
Files
-
aa0241a2052cb74ab0be848a48339267_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE