Behavioral task
behavioral1
Sample
45f6edf77e82bd8951d0ea98c1106bc9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45f6edf77e82bd8951d0ea98c1106bc9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45f6edf77e82bd8951d0ea98c1106bc9_JaffaCakes118
-
Size
434KB
-
MD5
45f6edf77e82bd8951d0ea98c1106bc9
-
SHA1
59e6b0d13adff10bf0e77d26c73fd20732948a43
-
SHA256
c376a5f0bd936e58519bec947ae99d110294c57b6bb72aa2b53d09a21db8b7e2
-
SHA512
86fabc1ea3afb512046f0bfc103f7ee62dfab687ddc03cc4fc9ef30e831360896e4766f0e0bcbed2f1a89c692930f50dc5e0c22dfd474d165ed7c275ebe9c31e
-
SSDEEP
12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBx:eh6chYus9g3r7zwlyoc7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45f6edf77e82bd8951d0ea98c1106bc9_JaffaCakes118
Files
-
45f6edf77e82bd8951d0ea98c1106bc9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE