Behavioral task
behavioral1
Sample
aa740cae9510e0eceda5d67e32c95f54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa740cae9510e0eceda5d67e32c95f54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa740cae9510e0eceda5d67e32c95f54_JaffaCakes118
-
Size
272KB
-
MD5
aa740cae9510e0eceda5d67e32c95f54
-
SHA1
31f3cdee153e2d4c3ee9a716ac212b6f75f37715
-
SHA256
22c744b240e579345da605c130fc989e91ff06b04781f8241995debc79cce71e
-
SHA512
4efe6ce75da6db2de85bbac6b41ce48b7d58d10380be4f659447811ca1b6448410e54706895174e9d7acf00110e17af49f4c879d9a8850d5ae03aa436d7b8d4c
-
SSDEEP
6144:Xk4qmkM/UPqK9+h2Mu6BO6sDwtekVhEv/09L9KoyGqyjXs9:09VyKU4MuQOr6Dcv/09L9DyNyjXq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa740cae9510e0eceda5d67e32c95f54_JaffaCakes118
Files
-
aa740cae9510e0eceda5d67e32c95f54_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE