Behavioral task
behavioral1
Sample
45cb39bddc4c72c54b58b3ceb681fd32_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45cb39bddc4c72c54b58b3ceb681fd32_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45cb39bddc4c72c54b58b3ceb681fd32_JaffaCakes118
-
Size
23KB
-
MD5
45cb39bddc4c72c54b58b3ceb681fd32
-
SHA1
767fc7757a85a3d3cc2fab144d6286843cf0df40
-
SHA256
074fe8c24e86cd89e1d81eb8b45997a5130e6d316a4edec9fcabd1a72e9edf50
-
SHA512
3def123a49f6ccde62f3a34804b1782ae264372cb361e8a570616518dc0f63fa75a89ad5789c1db066b3d895365f9fece86f6ae2047254a4b29b65ec3a27c3d8
-
SSDEEP
384:2wznVKyqCvPSryiZud1+tNWEAI2uzSPiNi/ZQ:2QnwfCyxnJ24SPiNi/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45cb39bddc4c72c54b58b3ceb681fd32_JaffaCakes118
Files
-
45cb39bddc4c72c54b58b3ceb681fd32_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE