Behavioral task
behavioral1
Sample
453e060ee3d778c2e63d441ffcb74fe2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
453e060ee3d778c2e63d441ffcb74fe2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
453e060ee3d778c2e63d441ffcb74fe2_JaffaCakes118
-
Size
2.3MB
-
MD5
453e060ee3d778c2e63d441ffcb74fe2
-
SHA1
4a8232737add7e655192abd15b8246647e92cdbf
-
SHA256
d9a34a4d499bad20d91b0cbbbc2cb1dc7c81fdfbdac0de47814a09b336c3967c
-
SHA512
2e8269f96ed5688acffd63b5e733d71dc0bb314448732a5cbf638d33917dcae493e33c2919a097260a6b0f1895df0dfd4ffa9e335ace09c1bb3539afc0f98b7b
-
SSDEEP
49152:YaerQZbd2+erQZbd2uerQZbd2+erQZbd2Bwm8:irQZArQZYrQZArQZGW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 453e060ee3d778c2e63d441ffcb74fe2_JaffaCakes118
Files
-
453e060ee3d778c2e63d441ffcb74fe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE