Behavioral task
behavioral1
Sample
453ad542443b1a3e34d1ee5ca6a963bc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
453ad542443b1a3e34d1ee5ca6a963bc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
453ad542443b1a3e34d1ee5ca6a963bc_JaffaCakes118
-
Size
84KB
-
MD5
453ad542443b1a3e34d1ee5ca6a963bc
-
SHA1
49a0a04a59a22eea1c619731cf3df05640f5ecbf
-
SHA256
e9bfbc96aa09228e14add1b918fbb153c0951bdd28578063a3b6ecb2679e1d1a
-
SHA512
cb18649253fd4d5d04310074c34cbbbc3c03632a8937f0208c972907413ae9e4696c396ec760c23e5299ea5d8fe200124f74e1f8bb0f772de5a0451ee71f5d47
-
SSDEEP
1536:/mzBgd6zd0CnYJmxChO6SJfqh0I4xF8RQ12jsCl6YZgB51nouy8:3EzjSmcSJCuI4xORQ1Dc6YaHtout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 453ad542443b1a3e34d1ee5ca6a963bc_JaffaCakes118
Files
-
453ad542443b1a3e34d1ee5ca6a963bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE