Behavioral task
behavioral1
Sample
45d6a4531505dd4cad5ad732ff420929_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45d6a4531505dd4cad5ad732ff420929_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45d6a4531505dd4cad5ad732ff420929_JaffaCakes118
-
Size
136KB
-
MD5
45d6a4531505dd4cad5ad732ff420929
-
SHA1
0f0c1291f5df92fcd6b4a2356d31c06c6cd842a9
-
SHA256
9afd45c0d3fe40b18db9c3ae1fccd3457e6629222062e374bb5838043d02561f
-
SHA512
7270a62b196d41e4f2a86d0087f52f26a9f9d54bd67f1c29cc2e59fa0e5e242bfa195c25bee8de0cbf9fdf32aa1c5689133331d1f109e63f13900fdbc78f01aa
-
SSDEEP
1536:RSrMzLMR135ncZfXIWqLhaHSJtLvjooj+5DzS2WnAeWEzCuPlFF6:RwT1iZPk8o2iFCuPlFI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45d6a4531505dd4cad5ad732ff420929_JaffaCakes118
Files
-
45d6a4531505dd4cad5ad732ff420929_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE