Behavioral task
behavioral1
Sample
ab0249a6b4b2b6dbc1b2ea13338aae6f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab0249a6b4b2b6dbc1b2ea13338aae6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab0249a6b4b2b6dbc1b2ea13338aae6f_JaffaCakes118
-
Size
147KB
-
MD5
ab0249a6b4b2b6dbc1b2ea13338aae6f
-
SHA1
f24ce7bfa61e3e74d58fa1ff1d86369b09d851e0
-
SHA256
961f168d7a6912edbe8738e3f3ef35e4c3ae6c37a3ca53e55b8476ca5978051b
-
SHA512
10f6dd9cd9c9b160092c426db1b9ad1b4b93dc970af69c9dcde92685b87e1024cdef38d501a404081c0119e84b72d129bb5e20282836b05c5d522d8de0dd187e
-
SSDEEP
3072:2P50dxN5cJqN0dSuUrbmUCvKiuI6EmKeYaZ/l79/UHPrf6VcN3yc1WcF54X:sOP0kCdkmUtiuI6buaZ9hWPD6VcRv1y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab0249a6b4b2b6dbc1b2ea13338aae6f_JaffaCakes118
Files
-
ab0249a6b4b2b6dbc1b2ea13338aae6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE