Behavioral task
behavioral1
Sample
459a3893bc97b9c1d37c85470e50d257_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
459a3893bc97b9c1d37c85470e50d257_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
459a3893bc97b9c1d37c85470e50d257_JaffaCakes118
-
Size
112KB
-
MD5
459a3893bc97b9c1d37c85470e50d257
-
SHA1
e07a5a15a41ed6d6cad88f8e26d7a2dcaf3d56ef
-
SHA256
ab61f636b048ac0b1882507a9b6af2078447db3321d42287ea7b7ffba750bc76
-
SHA512
54853bdf2f9039b9400899a09c293f035c57a43480a48463492ce35576f827dc01c88856d01483383af40a38fe2700bf4db86700fd887bc0fc6784e1b24afc27
-
SSDEEP
1536:lYetZVlfNaUXLda5jEI2NdOO1yWphUPt6KSXpzWQTmfHU1mjHZJ6IB6YkDbRE8bb:pzlFHLd4jap/edSXYQTYHUMDZdyb7bb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 459a3893bc97b9c1d37c85470e50d257_JaffaCakes118
Files
-
459a3893bc97b9c1d37c85470e50d257_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 584KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 390KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE