Behavioral task
behavioral1
Sample
aa3692b574e36bd07616b1d20ff66a1b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa3692b574e36bd07616b1d20ff66a1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa3692b574e36bd07616b1d20ff66a1b_JaffaCakes118
-
Size
5KB
-
MD5
aa3692b574e36bd07616b1d20ff66a1b
-
SHA1
de139f83c7669f8aae4caa82259f5c88bfe1726d
-
SHA256
14608fe797a4bf783cf33f9f16aefa1199feecaf39ff28a5cc2b41161d6ed994
-
SHA512
e924523929558d303f1ddad711b8975cfb4f41abb04976a24cc970da64dd510488ca08043fbe0bd7d4ec868d293093dedd536cd45583a25d0202dfdb5e074212
-
SSDEEP
96:86zscWAW1FgsZexFutCJVMkBkdGeCaKrrZE8SZNfTytNITpRexkj8HW1NBh2OciG:3scWD34xFutLkBkdvKfZJSZWOR8S8E6V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa3692b574e36bd07616b1d20ff66a1b_JaffaCakes118
Files
-
aa3692b574e36bd07616b1d20ff66a1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE