Behavioral task
behavioral1
Sample
45cd9ba8730eae9acece8915c827dd52_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45cd9ba8730eae9acece8915c827dd52_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45cd9ba8730eae9acece8915c827dd52_JaffaCakes118
-
Size
140KB
-
MD5
45cd9ba8730eae9acece8915c827dd52
-
SHA1
d0a28f71ee4a739701fa47ecea0c5eaa60102045
-
SHA256
5a59cd8903fa2aa6ecd8d3ba9a20b7927358138e9ad7845462e85616c91c67dc
-
SHA512
175a3d59dad2aab13ee4a367c62e5ff0f3b1e071ae39e5c52020f50e516323bd4fcb9d3729bd259be0cfe597e33adfb3a6664cb873d65fcdbd358e15032205b7
-
SSDEEP
3072:8k1dpAgVWlNdHa4ks0l6prED3x7jFdCBvr2BgoutxGkPS:3lVWZ6vs0l6p4Dh7x4hqmoSxGk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45cd9ba8730eae9acece8915c827dd52_JaffaCakes118
Files
-
45cd9ba8730eae9acece8915c827dd52_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE