Behavioral task
behavioral1
Sample
aec2cd9437a77d65e21d3608fc416563_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aec2cd9437a77d65e21d3608fc416563_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aec2cd9437a77d65e21d3608fc416563_JaffaCakes118
-
Size
13KB
-
MD5
aec2cd9437a77d65e21d3608fc416563
-
SHA1
ba8709b0ce40359a64f3016f7324c13218a8588e
-
SHA256
434de804408623c491aa245f65fd49012ba1ca6031d5bd0f73dd9a15ff2fc173
-
SHA512
f705bc5e9655ece2926855d3716159c4284cebc62ba8fe3b7114d97214b1c706ab4dc95a0e009df4896885924e413ac4b1435e8022aef9eb78de21085651e2e4
-
SSDEEP
192:5GgSvLdQYab3fShnpycCeDD9i/wdVJg2XfjHF+pVbLXtFi63pORtHDy1Pd4QVGz:5GzvLdcahnpyUDjLJgg29O6SHDyh5VG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aec2cd9437a77d65e21d3608fc416563_JaffaCakes118
Files
-
aec2cd9437a77d65e21d3608fc416563_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE