Behavioral task
behavioral1
Sample
456dd37c2fe33038f696f19800cdebd7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
456dd37c2fe33038f696f19800cdebd7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
456dd37c2fe33038f696f19800cdebd7_JaffaCakes118
-
Size
291KB
-
MD5
456dd37c2fe33038f696f19800cdebd7
-
SHA1
47b58c0558786b605bafb30f937964fff6a89c33
-
SHA256
960be69b2d68e0468ae89c72454a44de2b473a16628993378bee073d732bd6b7
-
SHA512
48633d75eeb8edb3b85ef0e59c614046e467329eb18b03078a2b4156e63d2868166d11744722f16b8430b158714cd56030297362a745c99b45f55145a31e11bf
-
SSDEEP
6144:ITEHv3+1Y1Gs8DBxBsqzdMqWDaay3lFpUxwlobGQETrSi2180a8Xmt:IT6+CwXBx86pU4Trm180hXmt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 456dd37c2fe33038f696f19800cdebd7_JaffaCakes118
Files
-
456dd37c2fe33038f696f19800cdebd7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE