Behavioral task
behavioral1
Sample
45bc31d9ef20a19ddc8f6eec8c9d27d9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
45bc31d9ef20a19ddc8f6eec8c9d27d9_JaffaCakes118
-
Size
17KB
-
MD5
45bc31d9ef20a19ddc8f6eec8c9d27d9
-
SHA1
137b11073e13eb4e7fe6bb75f0b904d39dea46ac
-
SHA256
616010ac4c456e7786e3cf27d91fed4082b5a4e8cfff39b0ed1c31f1fd473482
-
SHA512
8357620e7e76d6a66bf1ed768026e3fea73c7e75b586733fb1070d3cf0f9737ce11b887a979e025e9d42d1b8d8a2a1da06614ae5fcab1411663baec06863e7c0
-
SSDEEP
384:xYLDTs8hsF6qtK8lzQ8+Sych3mYvCPHxy:xYLXVhaTtDE8VfCPHxy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45bc31d9ef20a19ddc8f6eec8c9d27d9_JaffaCakes118
Files
-
45bc31d9ef20a19ddc8f6eec8c9d27d9_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ