Behavioral task
behavioral1
Sample
aa36368a8e0d3323c1b0abfe1c398dba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa36368a8e0d3323c1b0abfe1c398dba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa36368a8e0d3323c1b0abfe1c398dba_JaffaCakes118
-
Size
133KB
-
MD5
aa36368a8e0d3323c1b0abfe1c398dba
-
SHA1
66ae95b52b5c32c418d827b466c5d0db5d9432d9
-
SHA256
43a5d6c671c6363ed42dbe25792f849a087281b125d642bcff7e8421d90d484b
-
SHA512
1cb31c1e2bf9724cd3be8105a1147d1aa72606272803db30aaeeab89209a0afea65e4a73badd2799d4c5317a4920efdcd714f973f593b4ec152432ef29fd6ff0
-
SSDEEP
3072:D7cWbKoutKa1kLcynjWPKKtArmbuAl5aFmCUlK3eDjy:DFmoSKWkvavtArGlFhKuDO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa36368a8e0d3323c1b0abfe1c398dba_JaffaCakes118
Files
-
aa36368a8e0d3323c1b0abfe1c398dba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE