Behavioral task
behavioral1
Sample
45a06d4b3ef8c52e65c6f0e22a6b2fae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45a06d4b3ef8c52e65c6f0e22a6b2fae_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45a06d4b3ef8c52e65c6f0e22a6b2fae_JaffaCakes118
-
Size
219KB
-
MD5
45a06d4b3ef8c52e65c6f0e22a6b2fae
-
SHA1
590c54277d76fcfd5b87459cbb63fa71e67ec4f7
-
SHA256
b05144e972252bfd61ccd539e89fbb0117d2fdc225b679ebf030688dac02e6cc
-
SHA512
8cffe7f5b0a14416795bac5dfd7d11ffe4a482e5407475a2d8d5cf0c6f403424982da52d5abf36b46643d9245e70feaecadad172861011920cc2d3d47ea693c5
-
SSDEEP
3072:LG9QimCRI4rDpVcnmnCFNb+wi84elsUeaEXW6BQZv6NSgapKbDsnplerDRBjZqM3:KKiDrDb8Uw48pyrZdBQZvGakbHxvl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45a06d4b3ef8c52e65c6f0e22a6b2fae_JaffaCakes118
Files
-
45a06d4b3ef8c52e65c6f0e22a6b2fae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE