Behavioral task
behavioral1
Sample
aaa3b6e224b12217592d65a7ffc844a2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aaa3b6e224b12217592d65a7ffc844a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaa3b6e224b12217592d65a7ffc844a2_JaffaCakes118
-
Size
949KB
-
MD5
aaa3b6e224b12217592d65a7ffc844a2
-
SHA1
4b9c8271249280fe464bcb93ae45217b6fa43405
-
SHA256
437ffb21e0a393b3c6893183cb21bf35dad048b8bdbfb5f59aa281f6f035b4cf
-
SHA512
f3e6cde83e98227a92c1be9d347b0f50a777f9eb838ed2e00e92401b66e655733dc429685b2dabf263e420ecbfabe71bfd4c3116fb1e67e5b5533ad0262f4aaa
-
SSDEEP
12288:Fy30sHmR38KxpRUSTfOSpULxzMg21C62ZNAR8PwP0gxSn2FCCKEWfG0tDNH5Drp2:F20VRtUQHUtzMIveHvW2xK1OyD19pL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaa3b6e224b12217592d65a7ffc844a2_JaffaCakes118
Files
-
aaa3b6e224b12217592d65a7ffc844a2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 945KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE