Behavioral task
behavioral1
Sample
1a045c7e48b4f7ac8e84efa484e570d7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1a045c7e48b4f7ac8e84efa484e570d7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a045c7e48b4f7ac8e84efa484e570d7_JaffaCakes118
-
Size
199KB
-
MD5
1a045c7e48b4f7ac8e84efa484e570d7
-
SHA1
43db5ffba6c3bfb3034f90ee52fa2f55e689cd6f
-
SHA256
5c2f1ada9f2ec666c1becd64639daae13e0752ddeb900d047bf7152d23d4dd9b
-
SHA512
bc1389359821cbba4c8cb8a025f0da9086b9e32cb4dd9a5a65ebed25b13fa69749a5087111f999de27a7495adaa4fdce874cc64a784bd1497634d025fd7d9dcd
-
SSDEEP
3072:kc3+1VTcPiicKjyaRoV/vS+xn9ZstckswF30dnbagOzfq9bi+2gw:qVaw+yaRo5ZL/wtgCq9m+2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a045c7e48b4f7ac8e84efa484e570d7_JaffaCakes118
Files
-
1a045c7e48b4f7ac8e84efa484e570d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE