Behavioral task
behavioral1
Sample
241adffef3ec4258f6a4082bbe204ca8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
241adffef3ec4258f6a4082bbe204ca8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
241adffef3ec4258f6a4082bbe204ca8_JaffaCakes118
-
Size
31KB
-
MD5
241adffef3ec4258f6a4082bbe204ca8
-
SHA1
b78b829415667e93bd9536ba73aa0b148a9a20b4
-
SHA256
9dd27705716a4957b3cbb0be9c80f16b5e804cf607582d1778b1caafebb1f4b3
-
SHA512
f6bf631494639b158243be61f3321439db7d518a3f20365381ff669448bd6d24c4e3c379669c319f2562eee0a754da143a1610fc380757fe223ff8b0dbe4f00a
-
SSDEEP
768:c/Yykhy6CCDoB62MXpIUGa0/rbYTPxhonVBoKm5GUP6U0ll:0d6CAoBvRaMwTzMmU0R0H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 241adffef3ec4258f6a4082bbe204ca8_JaffaCakes118
Files
-
241adffef3ec4258f6a4082bbe204ca8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 820KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE