Behavioral task
behavioral1
Sample
ab9ea2500614d4bca5d9e61b7b7d6403_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab9ea2500614d4bca5d9e61b7b7d6403_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab9ea2500614d4bca5d9e61b7b7d6403_JaffaCakes118
-
Size
48KB
-
MD5
ab9ea2500614d4bca5d9e61b7b7d6403
-
SHA1
926fedc3826b92a43dc698f130e29248ad7a4110
-
SHA256
0cb46b80790d6d12d604bf7a757247701df15102593f1d97746ded8bd151eaf6
-
SHA512
5f5efcfa98e379273ca6e7ee3bfda149202e686d5e119365c2bc5511eaf39cc89d19d58766f83d230df60052a2553428a8f531f973192735b3c0d45e577b1246
-
SSDEEP
1536:5y9wdjsBst4xuW9RUY2Op7C9cTtKFlRoSBdnouy86:1t4xuNOp7Qvpout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab9ea2500614d4bca5d9e61b7b7d6403_JaffaCakes118
Files
-
ab9ea2500614d4bca5d9e61b7b7d6403_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE