Behavioral task
behavioral1
Sample
45bcf2aa5cbd51b5b688dfb7b08560f9_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
45bcf2aa5cbd51b5b688dfb7b08560f9_JaffaCakes118
-
Size
133KB
-
MD5
45bcf2aa5cbd51b5b688dfb7b08560f9
-
SHA1
631445525be38328ca51bdd64e6a1ff2d05bcfa2
-
SHA256
58ec939d74c52cb9203022585ee278a3df4cbc2fc338b36461814e04365b0308
-
SHA512
7706f428732706a8f47aab70c60f2510624ddfb27245f6b1cc957df6c6d8d992dffbd652bd74f3eee3d7d83ab2cf3b42d03b644df6917678b573daa725664701
-
SSDEEP
3072:x7fPYfCXovWZQeQ4C1vemPte1LZwXt7n1nJsyzwpwr8COHYCSQQ:N4C4ONQlvyc91J5EO8T8QQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45bcf2aa5cbd51b5b688dfb7b08560f9_JaffaCakes118
Files
-
45bcf2aa5cbd51b5b688dfb7b08560f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE