Behavioral task
behavioral1
Sample
454735a499a4ea06ef443c739d68ce70_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
454735a499a4ea06ef443c739d68ce70_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
454735a499a4ea06ef443c739d68ce70_JaffaCakes118
-
Size
220KB
-
MD5
454735a499a4ea06ef443c739d68ce70
-
SHA1
479d343ea6baf4806be109227b4f63525f56473e
-
SHA256
889b068fc9df021e5f81208de9f4f8b1c740cbb2e6724e872e216c9b7631909f
-
SHA512
2a1b15c42fd2b6cd63ca432a7b95990f935eb1f41f03d0ba85e883f7fba20b3fd1c75d12fe88858c848b032252e0a4087f12fd38f93e4c4144a8894f3ea3ddd9
-
SSDEEP
3072:bjr87S7Gnzbo6KcWmjRrz3Qd+R0RhYGIdG+jrT0FPcbUygUK4+IWavT:AZvMG2biQaDK4pT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454735a499a4ea06ef443c739d68ce70_JaffaCakes118
Files
-
454735a499a4ea06ef443c739d68ce70_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE