Behavioral task
behavioral1
Sample
f45a0bbb980bdab69a0fa55292afd039_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f45a0bbb980bdab69a0fa55292afd039_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f45a0bbb980bdab69a0fa55292afd039_JaffaCakes118
-
Size
17.5MB
-
MD5
f45a0bbb980bdab69a0fa55292afd039
-
SHA1
5485981c68509061c5ca580492f958497097d734
-
SHA256
9faf31390dea4db8cc34ea86f7a521b01e3ac798a2c75a336bdb5f6f37043b73
-
SHA512
ef5742bc1be11b54dfc164df21fc3057b27a698406b289c15f00f4df390d22cc3b550af0bfbebaf8f508c8109b901f8cd7d159bf95a8d4c6e1c2c697d3349cd7
-
SSDEEP
393216:PuzYwh1q3ULhNaZ5h1q3ULobSh1q3ULhNaZ5h1q3UL9:mzY81q3L1q3ja1q3L1q32
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f45a0bbb980bdab69a0fa55292afd039_JaffaCakes118
Files
-
f45a0bbb980bdab69a0fa55292afd039_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE