Behavioral task
behavioral1
Sample
545afba77478dd26091a11c0de9175d1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
545afba77478dd26091a11c0de9175d1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
545afba77478dd26091a11c0de9175d1_JaffaCakes118
-
Size
3KB
-
MD5
545afba77478dd26091a11c0de9175d1
-
SHA1
1b5937ed5d3e491b9394f77af80f78ad64a2f89d
-
SHA256
be4d2e4393a34d459bc11f1deb55fdfc195536118acee4a9db00bb88e73e87c1
-
SHA512
18b84de2f33c1a45c3530553c4611455d6bb03fed19801e5dc9dec3b87664e7fa5f6afcdd4578964301e2c566132cf3de8183852bb9a5b5fda0bbcac9f74efc4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 545afba77478dd26091a11c0de9175d1_JaffaCakes118
Files
-
545afba77478dd26091a11c0de9175d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE