Behavioral task
behavioral1
Sample
453e4df04ba226303677c5381f96c45e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
453e4df04ba226303677c5381f96c45e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
453e4df04ba226303677c5381f96c45e_JaffaCakes118
-
Size
39KB
-
MD5
453e4df04ba226303677c5381f96c45e
-
SHA1
0552c273deb6a5818b86d0d5c796b05ce1480dad
-
SHA256
6b00203af94ca120893081a23d71f5130fefabc6d3ad886a7824f767a7af2a81
-
SHA512
42e8790dd83c97aff30f6873d039c226e119cdf305ffd5746aab31b2501d238f476aab6b30d2e3d2c4427578f70143bca42bccc40088b0ed89f579a45361262d
-
SSDEEP
768:VmOhplcsHvKWzX6HJmFqda7kolC+nbcuyD7UnXR/NrFmUO:kOhplcsHv1X6n0/nouy8h/NrIUO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 453e4df04ba226303677c5381f96c45e_JaffaCakes118
Files
-
453e4df04ba226303677c5381f96c45e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE