Behavioral task
behavioral1
Sample
be45aef94d632822d6a1125553101fc1_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
be45aef94d632822d6a1125553101fc1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
be45aef94d632822d6a1125553101fc1_JaffaCakes118
-
Size
7KB
-
MD5
be45aef94d632822d6a1125553101fc1
-
SHA1
d00524936a3ab450b4747fa34c25f1c644a8ebbd
-
SHA256
15660cccc2594e1043ccdd7742db12a05a8d49edcd59ceedcaa71418de6b0aa6
-
SHA512
12023780e722b8fc750028824c402d8bfe57ac42d155804a600158bfa00833806846e1edd13b9999ab0d694ff1e9f014a4012af1d785ecdd6a31c81e2e7a753f
-
SSDEEP
192:j3rP+/JBAej2Ou4hGUKDaFoYl7Obb0bIa3pAM86k6Roh3:jj+BBdbuM7eSCbda3pVFk6GV
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource be45aef94d632822d6a1125553101fc1_JaffaCakes118
Files
-
be45aef94d632822d6a1125553101fc1_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE