Behavioral task
behavioral1
Sample
ae5ce44ad1b928d38a9f0672faa56898_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae5ce44ad1b928d38a9f0672faa56898_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae5ce44ad1b928d38a9f0672faa56898_JaffaCakes118
-
Size
19KB
-
MD5
ae5ce44ad1b928d38a9f0672faa56898
-
SHA1
1025167b3ce6629d4697fb82ee4314b6062a20d1
-
SHA256
b78f05403afc06c7221f594ce77fe9458811b455952be44d3e6043f6b742d7d2
-
SHA512
cdd275e9b0fd88b19abcc002d353207867aa23e01fb411462e277191df801e679e74301b7c7edab4fb19d49cc601c85ccb95486342fa8e9cac9ea7af7c005c49
-
SSDEEP
384:ly/DYwCvq6ydY2vjsZfKDo71DKDj8NQKDk/QOAE:mJSdyd974b71w8e/J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae5ce44ad1b928d38a9f0672faa56898_JaffaCakes118
Files
-
ae5ce44ad1b928d38a9f0672faa56898_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE