Behavioral task
behavioral1
Sample
45c5d15e0fedc25238e7b34ede9920a1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45c5d15e0fedc25238e7b34ede9920a1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45c5d15e0fedc25238e7b34ede9920a1_JaffaCakes118
-
Size
508KB
-
MD5
45c5d15e0fedc25238e7b34ede9920a1
-
SHA1
05dbe1a3a7ba0685296a2607cd03b98446ee7a55
-
SHA256
7f1d78f8dcc6998fcecd56bd337c348c7e1f6c7a031de9b3e545654412139b2b
-
SHA512
c6a42cf620a090786ced61c2234586d56826d036fb1fdc780422aa2df8c699eadd38c76d23d70ded21dba27bac4419988f9a10149e9c98b6687b25bb2397dde4
-
SSDEEP
12288:83Wu9r2aErcZt2EQ+q4pggNQ+KD3tn78oC1TA:83DVVeEQWpnQ+K5nJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c5d15e0fedc25238e7b34ede9920a1_JaffaCakes118
Files
-
45c5d15e0fedc25238e7b34ede9920a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE