Behavioral task
behavioral1
Sample
aeb4b93ee5b460fbcc4db9303a26607d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aeb4b93ee5b460fbcc4db9303a26607d_JaffaCakes118
-
Size
64KB
-
MD5
aeb4b93ee5b460fbcc4db9303a26607d
-
SHA1
aecedb2a215e744cf4bc1919399393b6768e45c9
-
SHA256
12c2ef18df51e3a45207424f59e71dc90e34f773b504fc0b40ec52660103a405
-
SHA512
98770ff59ecc326f0cb94c743c548f82e261e2e170dff55beb911a72d0a65093152a60b1a89e9a3428f8fa1305267d0194dbd2a6694c08fac722a01474750a3c
-
SSDEEP
768:cwTZsDEyFfcKmI2nCLU8r6GCuDsMPR4B6lijXuuugZ/T:ceRXgYuoMPhwuCr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeb4b93ee5b460fbcc4db9303a26607d_JaffaCakes118
Files
-
aeb4b93ee5b460fbcc4db9303a26607d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE