Behavioral task
behavioral1
Sample
04abb889b1e30efc554d8bf8d44bd822_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04abb889b1e30efc554d8bf8d44bd822_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
04abb889b1e30efc554d8bf8d44bd822_JaffaCakes118
-
Size
44KB
-
MD5
04abb889b1e30efc554d8bf8d44bd822
-
SHA1
bfdcb2a8fe08d181a823b3688bf4b06e696e36bb
-
SHA256
e41b51351ebe2bdd8c9a40aae0f06f6b967bc4ce14c2f00a35c3a054e36d7d15
-
SHA512
4525fa2b698ccb8e24993564bf396d3ed00ed11be55de9c4319dc1b1ee413a6d9f5763938e09c252fb8f9286c89ffd105d7c1db3d1d02ff4a010671ab8fac335
-
SSDEEP
192:uhx7dgfT6TJsRhiYkGHq3i/RhJA8B3p/2Q74M8molmrfT6TJsRh79hqr2x8ixy:kdg2dwhFlRHJB3wQyUr2dw024
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04abb889b1e30efc554d8bf8d44bd822_JaffaCakes118
Files
-
04abb889b1e30efc554d8bf8d44bd822_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE