Behavioral task
behavioral1
Sample
045fa47994063bfbc11d5b7194c86d02_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
045fa47994063bfbc11d5b7194c86d02_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
045fa47994063bfbc11d5b7194c86d02_JaffaCakes118
-
Size
7KB
-
MD5
045fa47994063bfbc11d5b7194c86d02
-
SHA1
c5ba6239f6ab7ddefc09c7600305855900f2c60d
-
SHA256
0451f17b9cec768329d55c6ec258fee8d2aa10c824e3ad134cff0c3e4578e2d3
-
SHA512
5053f290ea7070bfafc1a7beee6f1e583dd9390861425e568b25d4bd7f5617e03f370feaa02688e159df09d4e2de9ffd8cd7e892e908933d302119f664eee25f
-
SSDEEP
96:jGBAJ9vHsm7Y+4NQWP8odOK6R4bS2a6EP/FnHF4TXiWghFh9q6CO7s+dAW4Z:jBHHzWEwZ6inE2PInfg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 045fa47994063bfbc11d5b7194c86d02_JaffaCakes118
Files
-
045fa47994063bfbc11d5b7194c86d02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE